Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f6f8642-741d-37d3-8573-f33711c2e9db.roa
File: 7f6f8642-741d-37d3-8573-f33711c2e9db.roa (raw, json)
Hash identifier: YAU0x0QKmfzMxMs3sf1jRwc36/cYsovnFO7yOVnBYOE=
Subject key identifier: 65:F2:BC:E9:5F:13:BD:9D:24:6D:BB:AF:E4:FC:99:10:D3:C5:FC:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32CDC7E2082E38C15EC05800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f6f8642-741d-37d3-8573-f33711c2e9db.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:cd:c7:e2:08:2e:38:c1:5e:c0:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=004333e9-3a25-47b6-9be9-b973cb150348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:44:e4:b8:58:68:52:38:05:2b:9a:8e:75:
38:22:88:3c:15:4c:12:c3:c2:85:6d:72:78:fd:7b:
87:6e:66:a2:e8:e1:6e:8a:65:23:30:a3:57:d1:e5:
ff:c9:62:44:63:6b:5a:e1:04:8c:3c:04:70:1a:01:
c1:8e:ce:c5:19:0b:88:0e:f0:36:84:0b:7b:93:69:
2b:5c:5b:5c:87:af:cc:2e:92:50:e4:1d:f1:37:9d:
9e:0b:0c:91:8e:9b:10:99:cf:97:a8:db:9b:86:8e:
cc:70:60:98:89:eb:d0:02:72:da:2b:90:bc:ae:f3:
76:f5:e4:22:87:4a:28:46:05:b3:ac:e8:19:42:d7:
0e:2e:cc:dc:c6:f4:0c:91:76:70:ab:da:99:14:89:
d7:b7:05:72:8d:8a:32:94:89:5c:d2:0b:7a:4d:1b:
e7:61:49:e5:a7:2b:8d:af:ad:75:32:18:33:db:6c:
4f:5a:ba:36:29:a3:cd:43:6d:36:8b:84:18:55:ef:
ca:2a:14:ce:7f:e4:3d:e5:60:80:47:05:de:79:54:
ee:12:b8:ae:1f:6e:02:59:7d:04:e0:6a:2b:6e:60:
73:49:1c:25:36:b8:e6:11:ff:00:93:ac:d0:a6:05:
7a:1a:e7:fe:65:f1:8b:bd:85:29:7f:38:6e:4e:cb:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:BC:E9:5F:13:BD:9D:24:6D:BB:AF:E4:FC:99:10:D3:C5:FC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f6f8642-741d-37d3-8573-f33711c2e9db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:cb:cf:3a:ba:4d:c8:32:34:9c:08:34:ed:a3:d7:55:ad:a8:
66:4f:e7:4d:39:d8:31:dd:b6:6b:2e:f9:b2:aa:42:ad:70:c9:
68:be:bc:95:c5:d1:bd:f2:7f:11:fb:ba:c7:b5:7c:5a:2b:23:
30:3c:84:59:fd:c4:39:be:cd:21:14:17:b0:bd:38:43:65:70:
91:76:6a:22:a9:9a:fb:3e:3b:85:50:5e:3a:34:35:88:f7:4c:
32:e8:16:cc:71:bc:c2:05:b7:73:ee:f9:f1:c9:a6:bf:54:1f:
b6:53:09:c2:f8:c3:39:a8:18:77:52:f9:66:f4:8d:fe:a2:a4:
6b:f6:ec:45:fe:a9:37:8f:5a:0c:45:4c:ec:0a:7b:dd:a9:c0:
53:ca:26:ac:7a:2c:30:70:df:8e:3e:c7:0e:dd:08:29:3e:f5:
85:21:56:b5:34:f5:5d:43:8e:33:58:a5:34:f5:45:ac:42:24:
7c:6e:39:7c:80:85:87:93:52:a7:97:49:3c:91:0f:f6:f8:54:
b8:16:f7:65:d8:5a:b9:a3:2b:97:e3:f0:d2:30:a6:af:1c:88:
36:48:49:91:ff:a5:62:cf:4f:cc:f9:be:58:24:5a:14:76:f8:
77:b9:80:2a:f0:9b:4e:b9:8a:9b:9c:a7:62:7c:8e:fb:81:33:
d2:9d:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:49:45 2025 by rpki-client