Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8580e61a-2fa1-3d7c-a91b-0044b93504be.roa
File: 8580e61a-2fa1-3d7c-a91b-0044b93504be.roa (raw, json)
Hash identifier: aYch2XIOMDChjY8tKLbbL9arKdXTKca15SNbK0ZFIR4=
Subject key identifier: E1:AC:7F:7B:9D:50:B0:14:5B:4C:6A:99:0A:63:99:29:0A:BF:86:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9D48C8251A83A60C7C4BAE8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8580e61a-2fa1-3d7c-a91b-0044b93504be.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:d4:8c:82:51:a8:3a:60:c7:c4:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=f389e498-1e7e-47e6-aaf7-9709f1b2836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:07:19:75:fd:56:47:b6:75:14:c0:31:69:
e3:29:a4:17:f1:67:25:c1:27:71:6b:41:b4:bd:7b:
2e:c7:0a:dc:9c:f3:af:d8:d5:1a:17:d0:4a:a2:e9:
31:a7:21:e4:06:05:90:c5:20:f7:37:53:e4:63:e4:
9d:6e:d3:84:7b:9c:78:52:bf:85:69:8e:6d:05:c4:
13:f7:dc:9a:26:dc:81:b9:6c:17:e0:7e:db:98:14:
c5:8b:38:b3:51:2e:f8:e8:60:7b:0f:db:f5:74:50:
3c:49:fb:23:9d:26:9c:8a:66:11:95:ad:b5:49:49:
e1:23:e0:db:1b:0c:8b:bd:7b:4c:72:f8:51:22:b6:
d0:16:49:c3:6f:85:9a:cc:a1:8c:6e:e3:e9:a7:5e:
5c:43:a2:f9:17:2d:b5:70:8f:a9:a6:bd:1e:10:ed:
64:00:8e:ad:89:b7:fd:49:f0:37:27:ed:b2:3d:16:
e3:9e:69:3e:b3:4a:73:07:04:34:ee:bd:df:ec:b6:
2b:a8:85:24:2b:12:e7:4e:97:1a:ea:de:c2:af:5d:
9d:35:27:06:62:81:ea:ea:b7:92:ed:c4:c4:4e:26:
00:bc:82:84:53:f1:f4:cc:87:6b:99:24:fb:aa:d1:
95:bf:d6:8c:75:bf:05:91:08:32:8a:aa:cb:b8:f0:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:7F:7B:9D:50:B0:14:5B:4C:6A:99:0A:63:99:29:0A:BF:86:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8580e61a-2fa1-3d7c-a91b-0044b93504be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:0d:b0:4a:96:bc:53:13:f5:30:56:1b:d7:bb:f5:24:b7:62:
c5:ad:0f:4b:91:1c:8e:60:4f:d2:5c:d7:b0:58:12:b0:49:e1:
3d:4e:51:34:00:69:1d:ef:03:b6:c4:62:04:6e:d5:1b:6a:52:
78:35:33:3d:32:d9:6f:b5:8f:87:60:08:16:d7:e7:f0:93:97:
dc:7a:ec:65:61:5f:03:d5:d0:f7:7f:18:57:71:7c:82:c0:59:
08:f3:68:1f:97:1e:df:ac:dd:31:f3:c9:ba:29:2c:f6:d7:ed:
b7:13:e9:47:a5:8c:d2:14:71:1a:99:15:06:24:b1:0d:b1:e8:
67:a8:76:b3:44:f9:3a:4d:33:da:fe:17:59:81:e4:ed:3c:fe:
03:c1:03:d2:cc:6e:20:36:63:46:06:88:3b:98:01:7b:56:73:
76:2c:72:48:54:19:4b:d8:c0:a2:70:07:85:1f:39:30:1b:d9:
1b:36:a6:e5:c5:35:c3:b1:b6:26:fa:e6:4b:27:25:5e:0e:07:
23:41:3e:1d:57:f6:6b:8c:e9:bf:9c:6a:27:66:c5:15:93:9e:
53:ed:d0:bb:60:97:41:5a:4d:cb:2c:12:88:ac:f2:64:4b:fb:
39:8e:20:cf:c1:5f:5a:b8:c7:dc:08:da:d6:70:e9:dd:a6:33:
79:77:c2:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD351IyCUag6YMfEuugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjM4OWU0OTgtMWU3ZS00N2U2LWFhZjctOTcwOWYxYjI4MzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPEHGXX9Vke2dRTAMWnjKaQX8WclwSdxa0G0
vXsuxwrcnPOv2NUaF9BKoukxpyHkBgWQxSD3N1PkY+SdbtOEe5x4Ur+FaY5tBcQT
99yaJtyBuWwX4H7bmBTFizizUS746GB7D9v1dFA8SfsjnSacimYRla21SUnhI+Db
GwyLvXtMcvhRIrbQFknDb4WazKGMbuPpp15cQ6L5Fy21cI+ppr0eEO1kAI6tibf9
SfA3J+2yPRbjnmk+s0pzBwQ07r3f7LYrqIUkKxLnTpca6t7Cr12dNScGYoHq6reS
7cTETiYAvIKEU/H0zIdrmST7qtGVv9aMdb8FkQgyiqrLuPAvvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOGsf3udULAUW0xqmQpjmSkKv4Z7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODU4MGU2MWEtMmZhMS0z
ZDdjLWE5MWItMDA0NGI5MzUwNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENEAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnQ2wSpa8UxP1MFYb17v1JLdixa0PS5EcjmBP0lzXsFgSsEnhPU5RNABp
He8DtsRiBG7VG2pSeDUzPTLZb7WPh2AIFtfn8JOX3HrsZWFfA9XQ938YV3F8gsBZ
CPNoH5ce36zdMfPJuiks9tfttxPpR6WM0hRxGpkVBiSxDbHoZ6h2s0T5Ok0z2v4X
WYHk7Tz+A8ED0sxuIDZjRgaIO5gBe1ZzdixySFQZS9jAonAHhR85MBvZGzam5cU1
w7G2JvrmSyclXg4HI0E+HVf2a4zpv5xqJ2bFFZOeU+3Qu2CXQVpNyywSiKzyZEv7
OY4gz8FfWrjH3Aja1nDp3aYzeXfCLg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:06 2025 by rpki-client