Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa87663-9ef1-3742-848b-8ac87e9880af.roa
File: 8fa87663-9ef1-3742-848b-8ac87e9880af.roa (raw, json)
Hash identifier: 3rzAlIR24WfzD2d992pci9k9tuNw+rCZzsuvz4w1b7s=
Subject key identifier: B2:CC:1E:09:EB:7C:2E:C3:E0:C0:1F:61:7D:1C:F4:3B:31:78:6B:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA6DADDDD71E8FC94B6C55980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa87663-9ef1-3742-848b-8ac87e9880af.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a6:da:dd:dd:71:e8:fc:94:b6:c5:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=9af8758d-304b-4781-9fc1-febbc19bb414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:d8:9c:19:27:d4:83:cf:70:4d:12:14:8a:
06:ab:ca:01:6f:51:59:3a:5a:9e:d5:fb:0e:5e:e2:
94:de:4f:30:73:a6:2c:d6:f5:9b:cb:f2:57:fa:8e:
e4:06:8c:96:4b:86:07:5e:cd:ae:52:34:e1:ad:8f:
9d:5a:4f:e7:4c:c6:b9:f3:ab:48:f7:4a:1b:58:c5:
e1:ef:f2:e4:ee:be:f3:9d:8c:f5:a7:c2:b6:c8:24:
74:cc:3e:f3:b5:57:aa:35:10:b4:2e:dd:5e:99:14:
dd:09:45:da:07:1c:48:69:79:fc:2d:92:3d:cf:9f:
6d:b5:df:27:90:e5:23:5a:8b:a6:e3:f8:8c:ba:f5:
d3:40:83:72:2b:15:5f:16:04:92:7e:f2:3b:ff:3e:
df:e6:4f:ed:62:1b:f2:3d:00:72:2e:64:fc:99:6d:
18:e3:4d:11:97:5e:f7:f1:d1:5e:7a:16:f3:50:a8:
50:04:6f:9a:c5:ec:01:53:46:30:4f:1a:8f:7b:ae:
b9:82:c2:9b:0c:f4:7d:66:0f:e6:e8:2c:45:2a:d7:
03:45:3d:d7:ff:5d:20:0f:77:5e:14:4f:05:6c:36:
46:80:6d:15:57:1f:ae:d1:a7:7c:a7:af:16:1f:bc:
38:e0:3e:96:38:fb:89:35:0e:d4:0a:f2:ec:98:48:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:1E:09:EB:7C:2E:C3:E0:C0:1F:61:7D:1C:F4:3B:31:78:6B:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa87663-9ef1-3742-848b-8ac87e9880af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:79:cc:45:e9:73:e3:a2:44:a4:d0:c7:e6:1a:5a:17:a5:5c:
87:77:57:a3:f8:78:c3:4e:c2:30:48:04:a6:41:60:31:f3:84:
e5:e1:d8:2d:5c:29:e1:fc:9a:e5:68:dd:53:5b:74:f1:df:22:
88:41:b0:15:03:4d:44:49:1d:01:2c:63:ef:97:15:98:d2:a8:
06:3a:bf:90:6f:48:a4:17:32:2c:d1:4e:46:81:24:1e:6b:d2:
83:0e:25:19:ec:f7:bb:e1:1a:b3:4f:5a:7a:f1:bc:12:02:82:
39:3c:c1:9f:85:4e:49:5b:65:60:c1:f3:f1:f6:c4:d7:84:b7:
5a:19:c7:79:55:f2:26:c6:33:00:40:13:9b:6d:27:b1:b6:ca:
fe:b3:b1:f7:24:90:23:05:f1:52:0e:c7:20:93:68:14:b8:e1:
97:3b:4a:b4:da:9c:b8:8a:59:cc:3a:c7:3e:f7:74:e0:b1:95:
ea:22:63:52:60:35:28:f9:2e:33:6b:ea:a5:89:8b:ef:52:13:
5c:4b:7c:70:d5:5e:6a:c8:27:d0:24:2c:68:94:37:fa:1f:d5:
fd:0b:24:5c:f3:c8:0c:20:47:3a:eb:42:b9:8a:f3:e0:6a:77:
85:e3:85:9c:74:fa:4f:c8:20:46:75:01:37:d5:cc:2b:fb:b2:
4c:14:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:26 2025 by rpki-client