Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3182d5-67be-3cb1-9545-412f63ce54d0.roa
File: 8b3182d5-67be-3cb1-9545-412f63ce54d0.roa (raw, json)
Hash identifier: c2167/ZDeqHhMMAzBIhFGClv7D+XAtgYNGWOjaJsZnk=
Subject key identifier: A2:8C:3B:21:92:72:6E:B9:C0:FA:E4:18:1E:4F:B5:67:8C:BE:62:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D5BB2134E95B14E282FFFB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3182d5-67be-3cb1-9545-412f63ce54d0.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:5b:b2:13:4e:95:b1:4e:28:2f:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=a3ee5114-213f-4273-bb92-d66f2f6f0fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:af:a6:3d:d3:a1:8c:e0:2e:ca:08:f7:b2:
e7:fb:93:e4:fe:63:37:24:23:d6:d0:d8:1a:2a:b5:
7a:b8:a4:98:a8:88:ed:fc:c8:c7:7e:00:c4:04:2f:
89:9c:49:34:d2:2a:66:01:68:e9:eb:e7:8a:66:da:
2a:b7:dd:d8:b7:7c:57:05:bc:16:da:3e:61:6f:3f:
a8:3a:fc:54:13:d8:5d:47:07:bb:c6:11:16:0d:ba:
e6:55:62:a8:d2:b7:30:4c:d2:a3:6f:19:1f:4e:a9:
86:ad:70:fe:88:f4:b7:af:bd:39:7d:ba:22:a3:79:
2d:70:a7:12:3b:de:4c:f5:91:3a:9d:f4:71:38:08:
b5:b1:3d:27:8a:df:15:aa:a7:49:4c:cd:e8:cc:7a:
ba:35:5c:a5:ec:4d:71:45:d8:68:b8:87:e9:59:67:
d1:f2:29:44:d8:54:f7:ec:7f:d9:92:7f:bf:54:d9:
24:18:d6:ca:fd:3a:10:91:bf:dc:93:fd:6e:23:83:
73:5d:95:96:c3:3b:00:27:07:2d:67:80:d5:c3:7b:
27:72:bd:5f:51:19:66:ae:85:4b:7e:0d:1e:ae:98:
eb:56:33:df:60:c1:f2:0a:33:16:fe:b9:10:cb:1c:
b5:0c:96:82:da:6b:93:2a:b0:f5:b5:6e:87:23:13:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:3B:21:92:72:6E:B9:C0:FA:E4:18:1E:4F:B5:67:8C:BE:62:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3182d5-67be-3cb1-9545-412f63ce54d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:40:37:c1:56:19:94:c2:36:d7:09:a4:b3:13:d1:df:b2:07:
d7:ba:2e:49:31:61:b1:ca:71:68:82:51:1a:f0:70:4f:ca:17:
cf:93:98:9b:bd:86:df:e0:a6:9a:05:64:84:65:a4:ad:55:54:
fd:39:6b:83:9b:2c:23:5a:61:5b:e5:16:0c:17:44:e9:72:bf:
8d:34:98:f7:eb:9d:3f:7f:51:0b:4b:2b:01:ba:94:be:b7:1c:
4e:78:09:d1:71:62:30:8b:ca:00:43:d4:d3:09:9b:c8:f4:47:
f4:02:2d:a8:b1:f3:ee:ac:d8:fd:e7:05:fa:7b:95:ac:1d:23:
50:40:cb:a7:17:83:49:40:78:3f:4d:e5:23:f4:97:83:9e:30:
39:5d:df:15:3b:41:45:91:02:ad:f7:23:0c:9f:fe:ef:5b:fe:
de:7f:d9:6a:81:a0:e3:f0:cf:fd:32:82:f5:eb:0f:cf:08:17:
33:66:71:57:0b:25:cf:7f:5e:b1:4d:75:72:60:81:b6:3d:55:
96:11:fc:3f:4c:9a:75:90:bc:cf:c6:aa:f2:2d:ec:30:13:04:
6d:83:7f:7c:4a:5d:60:6d:d2:b3:7d:cb:ff:3b:f4:4f:e6:4f:
ad:64:9f:22:c5:8d:4d:3b:84:2d:a0:76:25:90:fe:d2:31:ab:
da:4c:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:25 2025 by rpki-client