Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9391c33f-8740-34ce-8a69-3415e34bb729.roa
File: 9391c33f-8740-34ce-8a69-3415e34bb729.roa (raw, json)
Hash identifier: DxXpQMd4Q67fCPw4A7gWvdf3NvFDrVxt/0tVrY20a78=
Subject key identifier: 63:4D:8C:21:45:96:66:6A:7A:D0:71:26:17:F4:7C:8C:EB:71:15:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9D459A59C01B19D7CFDB440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9391c33f-8740-34ce-8a69-3415e34bb729.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:d4:59:a5:9c:01:b1:9d:7c:fd:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=66673406-2097-45eb-8983-13dd7ad6bf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:da:0d:e2:0c:2d:d6:d5:85:6c:47:03:7e:
77:62:06:00:e4:e5:97:0e:29:34:31:5c:34:a1:e0:
eb:0e:2d:81:ae:f2:fa:f2:2a:ca:06:d3:ef:63:06:
53:7f:93:ab:96:9e:6b:60:53:07:81:8e:d0:70:67:
2d:53:f9:bc:f6:7f:b9:6b:bb:71:fd:d6:d0:5d:2f:
1b:04:c5:71:4c:7f:cb:63:c1:47:b8:b6:f1:0c:bd:
e8:5b:68:e0:09:7b:97:36:83:56:6a:79:7b:69:7c:
fa:75:a4:80:ac:a0:13:94:79:dc:d0:72:3c:bd:a7:
e7:c2:90:75:ec:c8:82:c6:a3:a0:91:1b:8c:a8:68:
5e:bb:fc:7a:4c:f8:ec:68:7f:95:b2:59:03:ff:6b:
5e:b7:ce:f6:bc:c6:51:72:a0:1b:c0:10:e5:e0:9c:
3c:8e:19:fc:56:b9:5e:d3:81:e6:4a:84:5d:19:65:
dd:c9:67:23:4a:f6:1e:ad:02:40:27:9e:41:9d:7a:
0f:0d:bd:0b:d1:a1:36:6b:b6:f7:3a:87:fc:74:0d:
b2:75:12:7f:af:73:9e:8e:01:fa:53:6a:33:32:8a:
44:d4:7c:c5:8d:1d:b2:97:53:a0:ab:11:fd:ac:20:
54:40:7a:93:06:fe:c1:86:26:02:28:73:ac:69:ef:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:8C:21:45:96:66:6A:7A:D0:71:26:17:F4:7C:8C:EB:71:15:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9391c33f-8740-34ce-8a69-3415e34bb729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:66:83:de:58:18:d8:27:0a:53:02:48:59:fd:88:a4:8b:1a:
a0:d5:89:d3:18:46:31:90:fb:6d:4a:ec:c3:a7:f5:fc:0e:cf:
a8:f8:76:57:57:5d:9e:ed:90:15:d1:bb:42:fe:e7:cb:0d:f4:
87:69:1b:bf:53:db:26:7c:95:96:8a:d8:fa:b6:7e:43:42:c1:
81:66:7b:ea:4f:94:a4:6c:00:c0:74:fb:eb:26:52:c2:be:53:
96:4a:8a:69:db:b8:55:0f:38:3e:f7:26:76:3b:7a:f8:f0:c7:
01:51:52:52:95:f5:83:f4:5e:b4:1a:37:f1:95:01:76:df:e2:
0b:99:5c:89:5f:80:b9:13:66:e7:4c:25:bc:10:a4:07:25:58:
63:35:26:d3:d0:69:2b:2c:8f:d7:74:84:33:d6:a7:1b:74:94:
23:90:d3:8b:e3:e5:af:81:71:8e:55:41:a6:5d:52:40:ea:ab:
1e:30:7a:da:bb:97:04:8c:62:3e:f9:d8:bf:31:98:cf:42:0d:
ea:f2:6d:37:c0:03:da:c5:7a:f9:c0:fb:42:67:07:f2:53:f4:
c0:8b:84:ba:4e:d6:b1:a5:31:2f:7f:d7:f1:53:3f:34:7d:a2:
8c:d5:60:59:22:ba:dd:11:b2:29:3c:93:10:d6:8f:10:26:8a:
e8:0b:74:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD351FmlnAGxnXz9tEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjY2NzM0MDYtMjA5Ny00NWViLTg5ODMtMTNkZDdhZDZiZjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHjaDeIMLdbVhWxHA353YgYA5OWXDik0MVw0
oeDrDi2BrvL68irKBtPvYwZTf5Orlp5rYFMHgY7QcGctU/m89n+5a7tx/dbQXS8b
BMVxTH/LY8FHuLbxDL3oW2jgCXuXNoNWanl7aXz6daSArKATlHnc0HI8vafnwpB1
7MiCxqOgkRuMqGheu/x6TPjsaH+VslkD/2tet872vMZRcqAbwBDl4Jw8jhn8Vrle
04HmSoRdGWXdyWcjSvYerQJAJ55BnXoPDb0L0aE2a7b3Oof8dA2ydRJ/r3OejgH6
U2ozMopE1HzFjR2yl1OgqxH9rCBUQHqTBv7BhiYCKHOsae8gaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGNNjCFFlmZqetBxJhf0fIzrcRXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTM5MWMzM2YtODc0MC0z
NGNlLThhNjktMzQxNWUzNGJiNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApWaD3lgY2CcKUwJIWf2IpIsaoNWJ0xhGMZD7bUrsw6f1/A7PqPh2V1dd
nu2QFdG7Qv7nyw30h2kbv1PbJnyVlorY+rZ+Q0LBgWZ76k+UpGwAwHT76yZSwr5T
lkqKadu4VQ84Pvcmdjt6+PDHAVFSUpX1g/RetBo38ZUBdt/iC5lciV+AuRNm50wl
vBCkByVYYzUm09BpKyyP13SEM9anG3SUI5DTi+Plr4FxjlVBpl1SQOqrHjB62ruX
BIxiPvnYvzGYz0IN6vJtN8AD2sV6+cD7QmcH8lP0wIuEuk7WsaUxL3/X8VM/NH2i
jNVgWSK63RGyKTyTENaPECaK6At0ow==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:33 2025 by rpki-client