Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a914d59b-3a8d-315c-831e-4f33553bfc3b.roa
File: a914d59b-3a8d-315c-831e-4f33553bfc3b.roa (raw, json)
Hash identifier: FmKmsZQxvDyYr+xpmtTO6msgPa08c8Q5ll3EbXlZNME=
Subject key identifier: 70:D0:B1:FD:10:25:14:5A:07:40:5B:EE:10:17:BB:C8:8C:79:36:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9668C3E886BE42F4CC511980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a914d59b-3a8d-315c-831e-4f33553bfc3b.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:68:c3:e8:86:be:42:f4:cc:51:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=6101f79f-bfad-4b08-aad5-802cfb660c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:9b:d1:a4:b0:1e:10:f6:f8:b4:39:50:6e:
40:43:34:31:d8:03:d8:b6:95:cd:dd:78:64:36:97:
46:02:02:85:2d:f4:15:d1:d1:20:22:9f:98:67:37:
3c:91:80:5d:bb:03:2d:5a:f5:3d:36:3d:8c:31:be:
9c:84:d1:23:10:bd:ff:b7:6d:b9:4a:1d:01:69:73:
cb:6d:49:58:fa:b5:48:d6:73:47:c8:57:82:02:ae:
d6:83:f9:91:84:8c:0e:13:56:45:10:68:67:4b:c5:
76:ff:20:e0:37:d8:d5:dc:e3:e5:53:ce:a7:0d:bb:
78:51:75:62:47:01:b1:58:c6:42:db:58:b8:b9:88:
f5:79:e5:f6:f8:64:c4:27:96:c6:dc:8b:e6:a6:e1:
8b:37:e4:a9:01:8d:59:c1:ea:9e:51:56:ef:63:58:
06:23:d1:d6:87:65:1b:ac:b5:36:00:19:cd:5b:5f:
69:97:7d:f2:f5:fe:a1:21:2c:4c:2a:fc:cc:0f:68:
10:29:86:81:cf:cb:17:9f:bb:92:5b:0c:53:1e:d5:
de:6a:85:2b:a2:6a:54:0f:d8:ac:5a:39:8e:1b:79:
62:44:73:fd:1c:b7:0c:08:c0:3b:2b:88:8a:7d:51:
2c:ba:07:1e:d5:b5:8b:95:57:36:25:96:60:cd:b1:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:B1:FD:10:25:14:5A:07:40:5B:EE:10:17:BB:C8:8C:79:36:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a914d59b-3a8d-315c-831e-4f33553bfc3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ab:46:53:f1:c0:7d:e7:4a:9c:74:f2:4a:25:cb:43:5e:02:
71:54:aa:c7:ee:ed:05:64:15:a3:19:32:c1:47:d9:99:e7:ab:
58:92:ef:3e:80:eb:5e:07:0b:17:94:42:7f:99:a9:76:09:c1:
fb:1d:37:2a:af:ff:18:e0:cd:80:73:58:7b:eb:8a:56:17:ba:
cd:d7:0a:0b:a2:67:aa:e4:1e:6c:cb:b7:1e:1b:41:20:5c:19:
ab:12:5b:56:32:fd:02:d5:cf:49:93:27:89:97:6a:e5:44:b7:
e1:0b:b5:38:a1:f4:74:80:7c:a3:b5:db:5f:3c:66:09:c7:f5:
b4:f5:49:d9:b8:40:b1:48:10:34:71:91:ce:ca:42:70:ab:5a:
95:7e:10:f7:da:59:92:bb:b5:39:d6:dc:2e:0d:f8:6a:c5:d6:
ed:29:16:e4:99:4e:5f:b4:ad:07:75:4b:ad:2b:2e:db:e5:1f:
98:88:65:3f:96:20:6f:72:70:98:b1:1f:65:24:d3:ad:d1:8b:
a3:1b:12:63:c8:31:1b:28:00:e1:23:49:b0:a9:b9:c8:30:1c:
79:b1:63:3a:e1:06:04:21:7d:48:5a:07:a4:a1:e6:09:89:c9:
da:f9:8d:57:6c:19:fb:ed:39:80:21:01:bc:f8:4c:42:b5:c1:
6e:11:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:56:53 2025 by rpki-client