Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e341d-bfa2-3d06-b540-a4a3a5e479d1.roa
File: a70e341d-bfa2-3d06-b540-a4a3a5e479d1.roa (raw, json)
Hash identifier: pLxElbmHW5Mz+l00sr+oFw5VQX8UBFzkIwwd0Tpti3U=
Subject key identifier: FB:80:C6:CB:91:C2:98:44:D1:A4:E2:11:62:E1:C7:D7:21:A2:9C:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E44A7A4728C03F64BBEF90B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e341d-bfa2-3d06-b540-a4a3a5e479d1.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:a7:a4:72:8c:03:f6:4b:be:f9:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=0b2e9fa7-125b-4172-8511-9937a4d5dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:86:d1:36:73:28:d1:f7:e9:90:b0:13:4c:
a6:31:37:07:4c:40:df:88:44:d9:60:e5:2a:10:7b:
a4:e3:42:37:11:05:7b:3c:81:be:e7:17:25:1b:75:
31:e4:d2:56:0b:3a:7b:21:7e:18:8e:8f:7a:d0:b4:
eb:b2:4c:78:8d:1e:4a:3a:ba:f8:b3:2d:a2:2e:0b:
ed:6c:77:da:46:f5:0c:c6:4d:4d:34:4a:1f:cd:b2:
53:06:49:60:b2:2b:8e:5a:52:1f:a2:20:dd:00:77:
64:f4:be:a3:82:ec:84:3e:43:ab:ca:7c:76:43:2d:
37:c3:f1:e9:48:19:a4:9f:31:67:d3:52:2b:4a:00:
5e:85:c9:1e:54:63:09:3a:3c:60:52:07:31:d5:c6:
2d:ff:8d:7e:a9:c8:c6:ee:50:28:23:45:b5:97:0f:
c3:98:8e:59:d0:7b:52:9e:1a:60:9b:e7:92:f8:df:
72:b1:13:26:5b:d1:ae:15:f7:6b:33:8e:5f:a7:e9:
74:ff:77:1f:f2:b8:da:a2:cd:41:b1:f0:a0:54:ef:
0d:9d:70:3a:b9:00:35:18:20:dc:6e:46:f6:54:b0:
7c:d8:a0:a3:6c:dc:b7:83:57:3e:2d:ba:cd:e1:c7:
6c:18:a9:9b:75:da:68:b9:2e:ad:7e:ca:e0:ff:9d:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:C6:CB:91:C2:98:44:D1:A4:E2:11:62:E1:C7:D7:21:A2:9C:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e341d-bfa2-3d06-b540-a4a3a5e479d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:76:eb:87:ce:73:c1:d9:91:d6:41:a6:46:ea:d6:3b:c8:fe:
71:22:8d:c0:98:05:d5:bb:37:0f:7d:1d:93:24:32:87:a8:da:
96:24:9c:27:13:e8:3d:31:39:6b:d9:14:f2:ac:74:27:87:ad:
81:dd:3a:32:56:11:f3:82:2d:04:c5:7c:5d:63:d3:e4:e9:6b:
9f:88:fa:4f:bc:15:d7:14:28:e0:c7:77:99:c2:00:f5:e5:ff:
a0:60:3c:1c:a3:cf:df:67:6f:6f:db:9a:bf:07:64:3c:34:8a:
e2:c5:c9:94:3d:c9:63:67:3d:9a:fc:24:19:f6:56:ca:f2:8a:
e7:e1:bd:05:20:45:cd:d4:2f:c6:e7:44:0e:0f:96:38:be:c1:
5d:a3:7e:0a:c8:0a:cf:ee:c5:2f:1d:49:b6:bc:08:ff:40:49:
8c:03:74:fb:62:dd:05:57:6f:de:8a:ee:ca:46:a2:fd:e7:13:
bc:5e:e0:94:c9:49:e0:05:6d:44:54:f0:bc:a5:08:4d:8a:ec:
7c:d1:fb:45:1c:1a:b2:46:b1:cd:75:63:59:7a:cd:ef:60:c7:
a3:bf:b1:be:da:9e:5a:b6:58:85:32:05:ef:56:60:8b:2d:51:
18:d8:0f:1b:fa:f8:d6:0d:7b:a1:15:e9:61:76:67:64:9c:a4:
af:84:e2:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Ep6RyjAP2S775CwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MGIyZTlmYTctMTI1Yi00MTcyLTg1MTEtOTkzN2E0ZDVkZDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7OG0TZzKNH36ZCwE0ymMTcHTEDfiETZYOUq
EHuk40I3EQV7PIG+5xclG3Ux5NJWCzp7IX4Yjo960LTrskx4jR5KOrr4sy2iLgvt
bHfaRvUMxk1NNEofzbJTBklgsiuOWlIfoiDdAHdk9L6jguyEPkOrynx2Qy03w/Hp
SBmknzFn01IrSgBehckeVGMJOjxgUgcx1cYt/41+qcjG7lAoI0W1lw/DmI5Z0HtS
nhpgm+eS+N9ysRMmW9GuFfdrM45fp+l0/3cf8rjaos1BsfCgVO8NnXA6uQA1GCDc
bkb2VLB82KCjbNy3g1c+LbrN4cdsGKmbddpouS6tfsrg/50GjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPuAxsuRwphE0aTiEWLhx9chopwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTcwZTM0MWQtYmZhMi0z
ZDA2LWI1NDAtYTRhM2E1ZTQ3OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENMAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOnbrh85zwdmR1kGmRurWO8j+cSKNwJgF1bs3D30dkyQyh6jaliScJxPo
PTE5a9kU8qx0J4etgd06MlYR84ItBMV8XWPT5Olrn4j6T7wV1xQo4Md3mcIA9eX/
oGA8HKPP32dvb9uavwdkPDSK4sXJlD3JY2c9mvwkGfZWyvKK5+G9BSBFzdQvxudE
Dg+WOL7BXaN+CsgKz+7FLx1JtrwI/0BJjAN0+2LdBVdv3oruykai/ecTvF7glMlJ
4AVtRFTwvKUITYrsfNH7RRwaskaxzXVjWXrN72DHo7+xvtqeWrZYhTIF71Zgiy1R
GNgPG/r41g17oRXpYXZnZJykr4TiXA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:04:34 2025 by rpki-client