Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c5479a8-78af-3c81-8fdd-6bc1be623ffa.roa
File: 9c5479a8-78af-3c81-8fdd-6bc1be623ffa.roa (raw, json)
Hash identifier: qSoEjWzLd7Xs4WbdsjQHdkxIqXz5Zu8v8utCW4QqOM0=
Subject key identifier: 7A:0C:D7:B6:18:17:1A:2D:48:E5:48:92:FE:F6:28:9C:9C:7E:5A:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB2EF544D0D7AA44326C0B100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c5479a8-78af-3c81-8fdd-6bc1be623ffa.roa
Signing time: Mon 24 Jan 2022 05:00:00 +0000
ROA not before: Mon 24 Jan 2022 05:00:00 +0000
ROA not after: Mon 28 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b2:ef:54:4d:0d:7a:a4:43:26:c0:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 05:00:00 2022 GMT
Not After : Feb 28 05:00:00 2022 GMT
Subject: CN=1fa0c2d2-e73c-42a9-b4b9-fbcfe1a8825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:52:5d:4a:5e:3e:51:51:f9:29:82:11:63:
18:37:40:37:22:40:56:f7:3e:c7:1a:e7:44:c8:d1:
37:64:f1:df:9f:65:78:38:75:b7:de:75:04:b9:10:
4e:6b:c1:00:40:d0:c5:bd:4d:83:23:a2:85:18:45:
90:98:64:da:72:b8:1d:81:fb:19:f3:38:45:b3:3d:
59:95:55:1c:c0:cc:54:6b:db:ce:95:24:f3:db:6a:
04:72:a1:88:ba:fc:19:4e:26:29:ff:6b:e0:c3:17:
d0:47:74:eb:70:76:c5:43:f3:64:10:81:94:6c:b0:
8d:8f:d5:82:9e:cd:d8:18:03:68:2d:4e:d0:44:60:
52:3b:82:69:8f:5d:ec:c8:99:ae:52:ba:d6:88:c9:
d4:99:8b:3c:4d:ad:d7:15:63:39:b2:e7:9a:99:93:
b6:fa:3b:10:31:86:de:3d:a9:aa:a0:b0:27:75:fc:
dd:90:42:24:bf:4f:fc:6c:81:df:5e:c6:24:8a:13:
5c:6e:af:be:1b:a8:4d:35:3b:80:ac:1f:b3:91:22:
50:e0:9e:18:9e:21:44:fc:ad:17:e1:9c:51:b0:ce:
5e:45:a2:86:00:31:2a:27:0f:e7:56:c9:92:8e:e1:
c5:1b:21:59:ad:8f:ae:9f:be:98:14:06:1b:f9:99:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:D7:B6:18:17:1A:2D:48:E5:48:92:FE:F6:28:9C:9C:7E:5A:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c5479a8-78af-3c81-8fdd-6bc1be623ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:97:cd:09:c7:b5:b4:15:08:5a:61:4a:2d:fb:15:c5:22:0d:
6f:f5:b0:b1:8c:6c:2a:79:95:64:f3:e7:54:13:91:da:5c:ac:
b5:96:c7:9c:1c:a4:36:55:f8:c9:fc:25:24:36:07:8a:32:cf:
e3:3a:85:22:80:39:e7:5f:07:34:23:cf:74:80:a4:55:db:30:
99:0f:99:e0:dc:a6:94:b3:28:8a:ca:38:97:cc:7a:98:53:2e:
38:09:f9:8c:92:a5:66:aa:cb:79:03:e8:50:4d:72:cf:ac:1b:
ad:af:16:ba:4b:0d:c5:9e:50:b4:3a:9b:be:7f:a1:73:44:10:
3f:bf:02:7f:a0:99:cd:9f:c8:6c:00:c8:47:dc:68:21:1c:14:
d8:3c:eb:f2:b1:5d:40:e4:2b:27:6f:8c:61:cd:0b:20:c7:c5:
4c:0b:35:13:83:2d:42:11:86:43:f5:ac:f2:98:74:f4:4a:56:
9e:ab:7c:e9:7f:d2:7f:da:f6:4d:6c:04:28:fd:00:9b:8c:8b:
65:64:1a:d5:1e:9a:50:b9:3e:d3:38:e1:0b:e6:1e:b9:0a:fb:
70:f0:bc:93:50:f4:af:54:d6:c2:4d:12:a4:68:cc:3e:ed:0e:
2e:dc:c9:34:6a:13:f0:a2:2e:03:5c:42:a5:04:b3:9a:95:28:
94:9a:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:29 2025 by rpki-client