Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7efc1d-d6e5-3f0e-9818-7555842e7a6e.roa
File: ae7efc1d-d6e5-3f0e-9818-7555842e7a6e.roa (raw, json)
Hash identifier: WVCCp3O4Hx7pf2hoKcpgsuOeXZCIaH5LW4AwQcXfrBg=
Subject key identifier: 49:57:92:8F:47:70:F5:F6:08:7B:A4:CE:1D:EA:15:1E:0C:F4:A0:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E960D119A96297F07274D5C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7efc1d-d6e5-3f0e-9818-7555842e7a6e.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:0d:11:9a:96:29:7f:07:27:4d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=9966f814-f258-4b54-8f8a-53bfa00c1966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:25:a3:eb:d9:a8:e9:9b:2a:8a:cd:e1:5d:
54:c1:9c:45:1e:2e:0b:4d:7f:6c:ee:90:ec:3f:78:
93:30:85:10:a4:af:b9:e6:c1:91:98:f3:9d:2d:27:
e4:56:e6:6b:5e:fc:9e:6a:7c:55:75:64:1f:a6:e7:
a2:8a:dd:12:61:82:28:9a:da:eb:13:c1:11:31:9d:
41:bd:e5:26:57:b8:fc:d0:f2:6f:38:d1:89:7f:76:
3c:22:c0:87:21:93:e3:ed:f2:68:a5:93:f3:f5:e8:
6d:18:b5:0a:57:22:12:05:36:ec:76:15:bf:38:27:
5f:93:f9:81:20:6f:d4:41:9b:ab:ef:12:c3:b2:4c:
4f:c1:a0:1b:4c:46:0b:57:72:2e:b7:07:6c:b9:1f:
73:41:60:e1:9e:4a:18:a5:d0:80:e4:57:ca:23:0f:
61:e7:06:55:95:0f:09:fa:ba:ea:f5:c5:42:7e:c6:
64:67:f3:ca:e0:9b:89:3e:6c:94:45:94:e5:fc:7a:
2a:d9:bf:51:1e:d1:fe:15:cd:e2:e8:c7:3f:59:ce:
f1:a4:ca:6a:4e:c2:7c:d3:81:30:fe:79:fc:0f:ab:
92:78:da:4a:35:a0:57:1e:2a:be:fe:4b:37:cd:68:
80:d1:23:e3:d3:53:9d:cd:ba:ea:0b:d7:d8:41:90:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:92:8F:47:70:F5:F6:08:7B:A4:CE:1D:EA:15:1E:0C:F4:A0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7efc1d-d6e5-3f0e-9818-7555842e7a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cc:a4:01:32:3c:59:87:12:5d:85:45:d5:1a:54:92:93:ea:
be:2b:ef:72:83:20:8a:81:b9:1b:df:24:f4:4e:26:36:53:21:
9d:bc:b5:d1:15:d9:0d:01:54:f0:51:19:ca:b0:00:42:2e:0a:
7e:41:ca:98:ff:bd:b8:a1:9e:cd:95:b0:63:7e:0f:21:91:24:
7d:3f:d7:9b:c1:d6:2b:1e:6b:06:5d:15:98:e8:28:f5:42:ce:
58:be:ec:2a:e8:12:83:60:76:8b:24:5f:62:8f:4a:44:63:80:
52:11:a3:b2:6a:ca:90:34:ff:07:95:7e:c9:bf:d8:12:a8:bd:
f0:b9:b1:61:10:9d:ab:5c:f1:0e:61:51:0f:4e:7e:51:88:c7:
bf:7a:c9:39:00:c8:92:ce:6b:ed:50:24:d1:1f:59:10:86:ca:
b8:62:97:48:aa:d5:cd:25:db:01:4b:b0:7d:85:c8:c3:45:86:
a6:80:f2:96:cf:5e:77:89:36:a7:be:ae:c1:4c:2d:10:b9:9a:
21:60:5a:5d:e3:2c:cc:b5:28:26:aa:2f:28:63:09:9a:a2:43:
87:5d:39:cd:fc:bd:44:5b:7d:6c:43:27:fe:f2:2f:7d:0f:5b:
ed:fc:0f:31:aa:8f:35:7e:46:eb:c1:e2:e2:77:49:df:45:bc:
2d:67:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:06 2025 by rpki-client