Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ef678e-2f06-38d5-b996-fa825895f8c8.roa
File: 84ef678e-2f06-38d5-b996-fa825895f8c8.roa (raw, json)
Hash identifier: z+I7n1KmXcmaJFoOMCkuP+QVOz5/KXvbeW92fTbsDCc=
Subject key identifier: 7F:E8:C0:B8:E1:8C:F5:D2:BB:AE:7C:0E:25:3A:A0:AC:27:09:E8:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E20F18EF8BC64B4965668F200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ef678e-2f06-38d5-b996-fa825895f8c8.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:f1:8e:f8:bc:64:b4:96:56:68:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=207058ea-062c-4450-8e6c-79f079a762f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:58:13:34:b5:4d:f9:bc:fd:ac:fc:d6:f5:
4c:a4:de:ff:a2:3e:76:8f:a7:1a:27:84:ae:78:08:
33:e9:fd:b1:94:ce:1e:54:8b:ea:a0:19:e5:a2:69:
8a:b2:d2:dd:6f:83:63:c8:d9:76:6f:f4:17:49:fd:
f6:35:7f:8a:a3:49:57:9a:4c:55:c5:95:23:67:54:
7c:e0:f8:33:ef:bd:b8:8c:66:99:f0:b6:12:d9:98:
29:f6:db:96:99:e3:64:c6:39:79:b6:17:6d:7d:25:
dd:4b:c7:e8:19:33:31:36:6b:7a:c9:fb:d5:7d:38:
89:e1:03:c4:9b:4e:2e:3c:de:2e:83:62:f9:b4:e3:
12:31:52:ca:f9:cd:93:c3:0a:6a:c6:44:96:72:1f:
0e:fe:d4:d2:9d:8d:bb:21:e5:0f:12:1d:37:4d:de:
3a:00:89:cf:6c:cf:fa:d8:14:a1:db:35:40:6d:d0:
3e:76:ef:e2:0d:5b:9a:43:6f:8a:95:0a:9c:7d:0c:
54:95:52:e4:c1:8b:4e:dd:1e:46:5a:f2:69:78:3e:
5a:f6:7f:a7:0b:05:3f:cc:3c:1d:72:63:b2:97:d6:
f2:b0:01:c7:f3:f7:61:9f:94:2b:f0:57:88:d3:a1:
3a:aa:58:3e:9e:7f:ae:30:7d:6a:85:19:95:88:fb:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:C0:B8:E1:8C:F5:D2:BB:AE:7C:0E:25:3A:A0:AC:27:09:E8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ef678e-2f06-38d5-b996-fa825895f8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:f3:b7:88:cc:2d:e6:e3:58:35:57:e6:71:39:36:f5:04:44:
e8:1a:17:d8:da:63:c2:70:1e:7f:07:b8:bc:f2:06:3c:06:37:
08:cf:4b:95:eb:d5:1a:c2:82:ea:39:1a:97:c8:68:93:a5:e3:
b2:55:50:73:df:7f:72:79:e9:a3:ab:06:42:51:dd:e2:52:62:
39:b5:5f:91:e8:f6:77:14:43:f6:54:42:33:f1:bd:a5:78:d1:
3a:ab:5e:c4:7a:40:4e:cd:20:8c:f4:a1:a5:3a:97:38:6a:66:
8d:3f:39:3b:69:47:35:fd:59:a0:f3:03:11:2b:a9:97:8e:66:
0d:12:e6:72:25:ae:44:55:b3:a2:52:f3:61:1b:5f:80:41:ff:
2f:4d:ef:75:6a:ed:13:2b:4d:5e:97:2d:00:7b:3e:1f:ab:c6:
07:c3:22:b2:3c:8f:22:30:01:1c:3c:38:2b:3d:02:30:59:55:
6c:ff:24:32:e5:b2:06:de:3d:cb:70:11:52:e7:f7:09:e4:97:
01:2f:87:3c:42:85:4b:bd:b8:94:f8:c0:db:9b:82:6e:3e:73:
59:d8:c2:bd:6a:23:ce:27:c0:43:4d:1c:79:b8:7f:55:c8:11:
c0:4d:73:f0:f6:cb:80:f9:56:ea:d8:c0:c1:e5:de:83:a8:50:
b8:d4:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:02 2025 by rpki-client