Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bc6a929-2c67-32d1-a76f-4f129cb0e280.roa
File: 9bc6a929-2c67-32d1-a76f-4f129cb0e280.roa (raw, json)
Hash identifier: l1W0ah/3tdFSUkT5CDvOHyR2eO4ZeSidYL9l2ZeSVLE=
Subject key identifier: F4:D8:E8:03:3A:D9:F1:02:40:BE:4F:6C:C8:D3:C6:CF:E5:84:43:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BBFF16C26F779782FF18EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bc6a929-2c67-32d1-a76f-4f129cb0e280.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:bf:f1:6c:26:f7:79:78:2f:f1:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=1ab7c08b-a1cf-46ea-9d36-fb9772cf3038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:c9:56:bd:97:f8:15:c6:8c:3a:5a:93:6b:
dc:02:68:d9:6a:95:dd:f7:a5:4a:a9:2a:85:4d:5d:
c6:f7:59:27:0b:e8:7b:6e:7f:75:32:fe:12:72:9d:
28:a3:7c:7a:7f:cd:8a:03:b3:04:80:c4:7a:0f:5a:
42:5b:38:b2:00:df:2d:d7:cc:80:a3:43:3b:56:43:
51:65:cf:09:c7:47:fe:bb:7c:2d:f0:d3:c7:62:a4:
4f:70:12:c6:98:c6:a2:39:8d:14:95:66:cf:69:58:
f8:1b:40:ec:9a:9a:9e:63:21:ee:7d:1b:7f:de:03:
98:64:3c:f2:20:38:cf:47:b3:94:ed:89:b5:c5:3b:
05:d5:25:59:f3:1e:d5:0d:36:3f:3c:2a:0e:bd:b6:
bc:48:27:4b:46:9f:57:81:5e:34:81:2a:38:a0:42:
1f:68:d5:a2:5c:b9:70:ed:81:9c:70:e5:fe:95:a6:
4d:ca:91:54:78:a5:ed:bc:22:19:ea:fe:3f:86:1f:
1d:c2:8e:60:0c:7a:f7:51:a2:fc:5d:9b:29:f9:8a:
2a:e3:86:35:43:88:3b:f8:f0:bc:11:2e:f3:27:4f:
05:53:6f:f8:49:97:e0:68:80:60:10:c7:90:43:ac:
df:e4:5c:a9:12:9a:e6:6b:30:02:81:3e:26:fa:59:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:E8:03:3A:D9:F1:02:40:BE:4F:6C:C8:D3:C6:CF:E5:84:43:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bc6a929-2c67-32d1-a76f-4f129cb0e280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e5:3e:86:ad:d5:0a:2a:0f:e8:4e:46:52:58:d0:de:27:51:
54:c6:5c:35:22:fd:0d:21:a4:e6:de:ae:ad:1b:5a:43:b0:91:
aa:78:21:d9:66:37:ea:56:ae:83:aa:60:69:c3:c7:28:73:57:
02:e8:59:b7:c8:c3:8f:25:a7:64:82:6b:a2:06:ef:86:e9:f7:
8e:77:b8:4c:08:b0:df:f9:31:4c:10:ce:94:b5:b1:93:93:1c:
c1:4f:5f:24:ca:af:c9:54:03:4a:15:51:19:89:2d:b9:14:d4:
d4:98:5a:6c:cf:33:93:41:80:f9:a2:b2:6c:ca:b0:ad:35:5e:
6f:58:56:d7:9d:f6:1c:6e:b1:08:3c:b5:4e:2c:70:0f:1f:fa:
bb:ac:93:08:e0:af:fc:16:6f:09:92:16:04:55:8b:4f:86:6b:
c7:52:8c:0d:7e:a5:29:84:26:b9:3f:b9:f6:61:ab:47:6d:d8:
cf:8a:0d:ae:c7:13:20:f9:e3:81:e1:8c:54:0d:c1:0e:88:6a:
cc:c2:2d:dc:64:0f:d6:ee:72:f8:88:a8:95:74:e0:4d:c9:1a:
65:32:cd:7c:a8:49:88:d1:9e:84:e8:f5:20:bf:3d:d9:53:30:
a9:40:e9:4d:9a:33:a5:38:35:8a:5c:f0:85:60:06:9f:6a:05:
e1:b8:dc:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0Lv/FsJvd5eC/xjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MWFiN2MwOGItYTFjZi00NmVhLTlkMzYtZmI5NzcyY2YzMDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio7JVr2X+BXGjDpak2vcAmjZapXd96VKqSqF
TV3G91knC+h7bn91Mv4Scp0oo3x6f82KA7MEgMR6D1pCWziyAN8t18yAo0M7VkNR
Zc8Jx0f+u3wt8NPHYqRPcBLGmMaiOY0UlWbPaVj4G0DsmpqeYyHufRt/3gOYZDzy
IDjPR7OU7Ym1xTsF1SVZ8x7VDTY/PCoOvba8SCdLRp9XgV40gSo4oEIfaNWiXLlw
7YGccOX+laZNypFUeKXtvCIZ6v4/hh8dwo5gDHr3UaL8XZsp+Yoq44Y1Q4g7+PC8
ES7zJ08FU2/4SZfgaIBgEMeQQ6zf5FypEprmazACgT4m+lmdgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPTY6AM62fECQL5PbMjTxs/lhENmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWJjNmE5MjktMmM2Ny0z
MmQxLWE3NmYtNGYxMjljYjBlMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjeU+hq3VCioP6E5GUljQ3idRVMZcNSL9DSGk5t6urRtaQ7CRqngh2WY3
6laug6pgacPHKHNXAuhZt8jDjyWnZIJrogbvhun3jne4TAiw3/kxTBDOlLWxk5Mc
wU9fJMqvyVQDShVRGYktuRTU1JhabM8zk0GA+aKybMqwrTVeb1hW1532HG6xCDy1
TixwDx/6u6yTCOCv/BZvCZIWBFWLT4Zrx1KMDX6lKYQmuT+59mGrR23Yz4oNrscT
IPnjgeGMVA3BDohqzMIt3GQP1u5y+IiolXTgTckaZTLNfKhJiNGehOj1IL892VMw
qUDpTZozpTg1ilzwhWAGn2oF4bjclQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:52 2025 by rpki-client