Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7942e6f-fe7c-3184-a151-2c6407f05eb7.roa
File: a7942e6f-fe7c-3184-a151-2c6407f05eb7.roa (raw, json)
Hash identifier: 6/XZ+gSlX+26yOm+xgXlXJOLSymtbgFC5Mspq5bgHew=
Subject key identifier: A4:2B:11:73:2C:D5:58:BD:15:AF:DE:4A:C3:56:8F:F7:A0:E4:F6:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6CC660469C0C24C24A1AA10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7942e6f-fe7c-3184-a151-2c6407f05eb7.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:cc:66:04:69:c0:c2:4c:24:a1:aa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=ab68923f-84c0-4bbc-aa1e-ebe7769b99a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:51:16:94:a1:3c:10:0a:cb:64:03:f1:83:
7c:00:3d:af:99:3c:6a:c1:7e:b5:4c:3e:7e:22:6f:
3a:0d:ec:32:e5:60:45:a4:88:a6:13:23:53:cf:1d:
8d:5b:e3:5b:7d:13:10:d0:23:1c:ae:74:15:f5:cb:
e4:72:88:74:d2:3c:11:29:b6:dd:89:ae:18:3a:eb:
d8:91:fa:00:6b:5b:c1:8b:41:18:5c:09:03:31:49:
17:60:67:f9:41:e7:05:f7:c8:62:c9:0d:29:77:32:
86:2c:52:5a:53:44:36:ff:17:b5:ea:30:49:66:c4:
99:f6:57:7b:d9:d1:72:c6:7f:41:fe:67:5f:da:fb:
dd:92:64:45:dc:53:f5:2e:b6:1f:a7:73:a7:17:4c:
da:d6:ea:c9:8c:cc:e3:9b:2c:28:bb:36:8d:fe:fb:
05:e9:71:fa:9a:b5:1f:78:9d:f5:6d:f2:c3:cb:d8:
20:81:3f:92:30:7a:7b:84:a5:cf:09:4c:f0:63:fa:
c3:ad:97:d8:90:b9:60:2a:ba:15:03:68:20:e9:5e:
2d:4e:ea:9c:7d:e3:0f:5f:2f:d7:78:bd:0c:b7:3d:
24:7b:75:25:f4:13:35:72:19:ad:10:a3:0e:0e:0f:
a0:be:f6:dd:87:b7:01:f4:61:2d:06:06:5b:e6:d3:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2B:11:73:2C:D5:58:BD:15:AF:DE:4A:C3:56:8F:F7:A0:E4:F6:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7942e6f-fe7c-3184-a151-2c6407f05eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:43:10:3d:cf:48:8c:a8:c7:43:60:c6:a8:bb:e8:fb:c1:db:
55:72:d7:8b:19:dc:b4:52:b3:69:d0:22:e2:21:6c:69:4c:70:
0f:5b:1e:e5:70:0e:ac:fa:9f:85:98:53:9c:29:16:13:f9:24:
2f:9f:1b:0b:1e:9a:26:fc:e9:03:0b:a8:03:32:d7:19:f9:c7:
34:ba:e7:25:96:68:29:ea:79:38:de:7d:e7:e5:4c:21:b3:4a:
46:e0:1c:de:02:33:1c:b8:3e:c5:c3:1d:f6:98:01:45:50:db:
5b:1c:be:5e:7b:cc:57:54:c4:cd:4e:a8:73:a1:d9:e0:a7:56:
d7:cc:b9:d9:1c:75:a8:88:79:76:e1:e7:63:3e:8c:8b:ac:59:
29:27:3d:cb:e6:33:81:e5:ef:8f:28:2e:d9:84:f3:83:1c:1f:
25:85:ff:4f:9c:38:99:a2:5f:b9:9c:91:1f:96:d5:14:21:7a:
e1:aa:36:2a:83:52:0d:a8:0d:6a:00:01:34:e6:e0:bf:33:87:
e8:76:29:8c:67:50:a4:dd:8f:a8:2b:f9:0f:ca:e7:af:77:9d:
59:a4:ce:ad:9b:84:d9:7b:62:d5:9d:a3:ac:cc:cc:b6:a7:ee:
88:f3:be:fd:f4:e6:9f:43:2b:d1:74:3b:2f:40:a3:b7:5d:fa:
03:08:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:07:19 2025 by rpki-client