Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8098f333-91f0-3995-9582-95eaf2d000c9.roa
File: 8098f333-91f0-3995-9582-95eaf2d000c9.roa (raw, json)
Hash identifier: wibTS559xa6sUjpZdn40g806ToZfG6+1oBIuxBKSFQk=
Subject key identifier: 48:40:CE:F8:36:B8:52:75:CA:BA:96:6F:3F:D8:CA:93:A1:85:2C:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F836F546375C4327A6BC25930
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8098f333-91f0-3995-9582-95eaf2d000c9.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:6f:54:63:75:c4:32:7a:6b:c2:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=28a5ae0b-43f3-4e24-b3f7-aab7a485994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:4a:45:49:91:d0:5e:70:0e:ff:0f:71:7d:
b3:8a:fa:09:a3:fa:80:f0:19:3b:49:71:31:ba:55:
59:2b:2f:d4:1c:06:70:5b:03:e2:b1:70:e5:59:bf:
85:69:62:d1:6a:cc:da:c4:f4:24:44:1c:78:4b:2b:
3b:ce:cb:f2:40:38:4e:7a:69:4d:b6:67:18:8c:28:
c1:c8:02:93:c2:14:4f:f4:eb:b7:d0:b0:c2:0c:80:
5b:79:de:24:39:7d:2c:6d:36:6e:7d:12:cd:14:db:
80:d4:de:a0:0b:bb:7b:39:5e:f9:6f:7b:77:93:b9:
af:e1:4f:ef:5c:67:74:66:ec:5d:30:7c:e7:e8:fc:
bd:9e:bf:1c:78:59:ed:2b:94:bd:c5:bc:0d:76:78:
12:99:de:7a:58:0d:1c:3c:5a:dd:c3:a2:52:e7:c9:
6a:35:c6:23:fe:26:80:a2:c1:c5:b7:dd:d0:3a:35:
88:8e:59:93:15:f7:fa:9f:9e:66:d8:06:0c:e4:45:
1d:23:a7:e9:be:75:29:d5:cd:ea:86:97:8d:16:b8:
42:f3:82:85:64:73:e5:71:17:d9:4a:c5:bc:e1:48:
ac:de:4a:0d:36:df:1c:2e:88:59:91:fc:11:16:8c:
d5:0c:37:eb:1e:fc:7e:5c:de:36:56:35:6d:39:64:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:CE:F8:36:B8:52:75:CA:BA:96:6F:3F:D8:CA:93:A1:85:2C:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8098f333-91f0-3995-9582-95eaf2d000c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:77:10:bf:ed:37:16:fd:d6:cf:ee:29:2b:ce:b4:f5:df:77:
b8:98:d6:06:d5:43:3f:26:16:57:5b:24:a3:13:bc:05:6f:8b:
05:e5:d3:0d:6d:10:f7:86:79:45:d1:20:c3:ab:66:a3:6b:98:
68:2b:32:b4:e1:51:3a:1b:b5:38:f0:18:af:d8:0c:32:3a:4f:
47:e0:16:94:c9:ba:2e:71:75:67:ab:24:37:d1:ed:df:00:28:
9f:b1:05:52:17:67:a0:13:77:92:a4:97:2b:d6:80:f9:96:3f:
7c:12:cf:a4:fc:ad:aa:15:16:bb:ae:5f:7d:ac:8c:a5:af:80:
54:78:fe:7d:dd:9c:04:7b:83:6c:5d:8f:70:51:8b:69:2b:68:
09:ff:f5:54:ee:79:ba:8d:83:8c:cb:c0:de:7e:6c:7f:84:06:
dc:0c:d4:73:45:05:91:5f:54:f7:c0:6d:57:7d:2e:0d:d5:58:
7c:25:d2:a9:9c:53:52:6f:50:fb:81:65:31:9f:35:fa:64:d4:
90:a3:53:64:00:e6:e3:62:e9:45:7d:61:86:4e:c1:6f:5b:e3:
c7:7d:fe:b0:e2:c8:be:85:f3:54:ad:b1:bc:17:ad:04:7a:fd:
b6:19:b8:21:9a:06:aa:4a:0c:c0:ce:33:b5:79:85:57:f1:a9:
39:03:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:02:13 2025 by rpki-client