Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3a03a35-8084-37ee-a9d8-05382a784980.roa
File: a3a03a35-8084-37ee-a9d8-05382a784980.roa (raw, json)
Hash identifier: W7ax5T5dT93rB5Ujlw1O/sY4PlOPqOauSBUefuU897E=
Subject key identifier: E8:01:0A:E4:DD:B8:D3:D6:0E:0B:BF:83:BD:25:79:2E:4E:E0:70:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F24BFA1C07B76FA312EDC5680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3a03a35-8084-37ee-a9d8-05382a784980.roa
Signing time: Sun 04 Sep 2022 12:00:00 +0000
ROA not before: Sun 04 Sep 2022 12:00:00 +0000
ROA not after: Mon 10 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:24:bf:a1:c0:7b:76:fa:31:2e:dc:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 4 12:00:00 2022 GMT
Not After : Oct 10 04:00:00 2022 GMT
Subject: CN=0e957569-f40e-48b8-8c94-761bddc98de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:a2:29:63:f1:f2:08:49:62:60:50:ad:63:
2a:4c:c8:f2:b9:86:09:cd:ab:c5:63:f0:e2:74:2a:
6b:99:8d:34:8c:65:23:26:a3:c3:07:6e:23:25:1b:
88:6d:b8:28:a2:31:af:96:cd:19:ee:30:d2:4c:bb:
18:0b:96:a4:b3:11:27:7d:50:37:b0:9f:1d:6d:50:
cc:f2:f6:33:06:0c:4d:c4:ac:b7:d9:c1:52:ab:8e:
c2:a7:5d:2c:89:18:9b:92:43:90:15:a7:98:de:b8:
f6:2b:f7:09:fe:5a:f5:a2:96:93:4a:b3:92:70:a0:
71:9b:64:ed:9e:9e:82:59:89:f1:06:10:61:8a:6d:
b2:de:a1:ee:70:ad:f3:1f:34:22:c5:0b:c1:47:18:
3e:21:6f:d3:f5:9c:d3:38:8a:bd:77:a0:6b:25:5d:
db:cf:3f:23:b8:22:e4:b1:e5:f6:84:6f:36:0f:cd:
09:2b:a9:81:9b:7e:58:da:14:bc:32:b6:0b:82:da:
80:f1:ec:93:a1:09:7e:63:db:ac:5d:59:6f:ca:9c:
15:5a:02:f8:1a:66:4f:ac:8b:bb:bc:b4:c0:e3:88:
70:7c:60:49:6b:4f:f8:ff:41:72:28:ce:b2:f5:9d:
6b:e8:bc:b4:c5:19:94:6b:81:ce:90:a8:d8:03:7e:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:0A:E4:DD:B8:D3:D6:0E:0B:BF:83:BD:25:79:2E:4E:E0:70:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3a03a35-8084-37ee-a9d8-05382a784980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:9c:3f:d4:24:5a:58:87:e6:6e:6d:16:28:3b:c6:44:6b:95:
00:80:7c:0d:1d:e3:8b:01:5f:00:39:b0:c4:99:fb:77:7a:63:
a0:3a:f9:49:1b:33:47:6f:f1:ca:e9:1c:df:55:96:ef:15:93:
d6:37:72:e3:30:d9:51:6e:2d:6d:25:b8:b4:b5:f5:87:27:79:
83:9b:93:5f:2c:ec:35:01:f3:dd:ce:7d:a9:cc:87:56:6b:b5:
f9:e6:a0:5b:2d:98:c8:7a:d8:70:9c:20:37:04:19:71:57:af:
8b:9e:3a:42:10:be:0c:1d:88:92:86:3b:35:d2:75:13:5d:4f:
29:3a:48:4b:93:41:1f:36:7d:e5:ad:a3:01:01:3f:4a:f0:d3:
48:6f:a3:ad:8c:bc:1b:b7:dc:6f:d9:01:0e:b1:81:43:b9:55:
f5:87:28:b7:7e:f7:bc:34:c5:ec:dd:1a:7e:7f:e6:70:96:a4:
90:d4:96:5d:27:4c:dc:aa:77:38:5a:1c:69:15:b7:87:31:df:
d0:00:57:ef:e9:eb:e0:dd:64:52:00:83:de:36:82:81:4e:8e:
f9:c1:1c:ff:68:47:7a:be:ac:b9:c3:39:d5:96:a1:67:e5:2f:
ba:b2:1d:7a:35:62:0a:51:e4:77:55:61:2b:71:c2:43:dd:58:
9a:36:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:15:37 2025 by rpki-client