Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a474320-0e80-3bee-8bf6-7dba0750bf76.roa
File: 9a474320-0e80-3bee-8bf6-7dba0750bf76.roa (raw, json)
Hash identifier: dMGpkmX6Nm2YQpJ2ZW0dxLR1flAyDsJwQ+ij/pTfSgY=
Subject key identifier: C9:E7:13:E0:02:D4:2F:1D:8F:F7:0B:3F:09:FB:CE:CA:4E:F9:46:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B5C8155039F65FEF373FF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a474320-0e80-3bee-8bf6-7dba0750bf76.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:5c:81:55:03:9f:65:fe:f3:73:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=6677f36e-0881-4749-9e0c-8a08c42fccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:18:1f:7e:30:3b:14:e0:b3:99:69:bf:3a:
46:7e:27:7b:80:0a:2f:7b:b5:30:82:7f:05:11:2f:
7d:9f:1d:7b:f4:80:34:f5:11:45:cf:43:59:99:27:
a8:f6:16:0d:fe:41:8b:25:d8:17:28:32:39:1c:bc:
40:7a:b0:78:b2:7c:b7:44:72:f3:91:6e:19:ec:34:
d4:4d:16:22:6c:d5:a7:29:67:03:f9:f1:57:a7:c6:
49:da:79:8c:e2:a3:11:38:10:1f:e0:0c:b9:48:d0:
90:28:b9:df:86:ce:9e:6b:d8:18:2e:0a:df:7f:c4:
5b:48:41:76:81:f6:81:6e:ed:43:0a:4c:f0:c4:7a:
f7:36:06:ee:54:72:d4:ff:ed:a4:cf:2a:8b:85:eb:
b1:45:46:ec:82:0f:76:5c:e7:b7:08:7c:6a:73:41:
74:00:30:9a:63:c9:b0:55:db:06:90:7c:ce:09:28:
d8:fd:ba:1b:0b:e2:c8:e5:18:1e:91:6b:81:1b:2c:
32:b4:95:b4:dd:34:b2:54:96:c7:47:60:74:4c:4d:
ad:b7:c8:cf:63:e5:27:f4:27:21:a2:6d:06:22:3a:
bf:77:f6:84:6e:44:04:00:1f:e5:d6:8f:10:e0:46:
55:a7:3d:74:79:2c:44:04:19:fa:8e:da:5a:23:48:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:13:E0:02:D4:2F:1D:8F:F7:0B:3F:09:FB:CE:CA:4E:F9:46:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a474320-0e80-3bee-8bf6-7dba0750bf76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e5:ae:e7:9d:68:d1:d4:cf:9f:4b:62:91:11:c6:9e:1f:22:
cc:68:c2:c0:3f:06:77:eb:4d:f5:b8:22:68:8d:90:1b:62:0d:
f3:3b:e7:47:f3:9e:5c:4e:0d:5c:54:a0:46:8e:42:87:ad:cc:
94:cf:5f:0d:86:89:72:80:fa:a4:d3:c6:bd:48:18:0e:74:3e:
6d:79:52:1c:9d:f1:0c:c1:ef:8f:2b:65:a4:50:81:f9:1f:9c:
fc:c9:c8:65:e0:0c:38:0e:a1:99:36:d0:16:ed:51:4b:22:9f:
be:4c:78:72:47:da:45:be:0d:3e:53:61:7a:01:67:95:e3:08:
b1:a1:bf:d1:72:32:f4:2c:30:99:ed:3a:e5:a9:87:a7:44:a8:
ed:b5:d7:65:0b:73:97:77:2b:6d:60:67:f3:57:e7:d8:d3:15:
a2:60:7b:1e:eb:b7:44:06:02:41:cc:10:d5:7b:53:cd:23:ef:
18:88:78:db:9e:66:a5:f9:5b:95:f9:64:5c:5f:32:6f:29:53:
f2:6c:25:ae:d7:d7:3d:51:56:d5:be:c8:e9:2b:94:83:15:37:
b3:1b:67:b3:7e:60:cf:b4:70:19:0e:2d:bd:1c:c1:05:7f:08:
e4:44:c3:ed:76:c2:e5:cf:31:4b:1b:13:87:83:94:d6:53:ac:
fd:a2:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:25 2025 by rpki-client