Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afc0b813-90fa-301b-a2cb-55173eca61de.roa
File: afc0b813-90fa-301b-a2cb-55173eca61de.roa (raw, json)
Hash identifier: XO6Xl3TrYpWrBOQLio7pPOg8lt3FBhnkNZrUIYpvp0s=
Subject key identifier: 38:34:46:C3:D1:7F:0A:7B:BD:74:65:D4:C0:74:C2:F6:F1:99:D5:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E480E5686E617FD821B1A8FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afc0b813-90fa-301b-a2cb-55173eca61de.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:0e:56:86:e6:17:fd:82:1b:1a:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=85fbef9a-7cb0-45eb-ac5c-70d940d0d96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:f0:f0:d7:52:fe:5f:93:19:1c:c1:d5:20:
16:89:d1:be:a7:c0:f5:6f:60:10:0e:d5:fe:c0:5f:
78:e4:e2:62:62:91:89:81:f3:ce:9a:f6:a7:64:4a:
f7:63:0b:f7:58:25:de:41:44:9b:6d:24:08:0c:0e:
c4:a4:3b:da:fa:ac:d4:26:d6:93:30:c7:05:7e:4e:
5a:72:16:46:23:95:68:a3:c3:93:d9:31:ba:fb:60:
cc:dd:13:40:53:cc:4d:07:43:1e:fb:af:d2:87:27:
62:fd:7d:2f:68:38:87:00:46:59:07:cd:8b:69:cb:
2a:5a:73:bc:b6:09:f3:bc:ee:76:06:6e:73:82:97:
5b:1b:71:65:2b:3c:fc:90:56:de:94:0a:cb:0b:bc:
bd:4b:59:42:ff:c3:21:a4:ff:e6:10:b3:f9:57:a4:
8b:f4:6c:23:b2:1e:c4:1a:b5:1b:b6:8d:14:1e:1c:
0f:ad:a3:09:c1:81:51:fe:68:ee:e8:b8:ad:bc:17:
95:7c:aa:60:f4:e2:28:2e:02:21:6c:c1:a4:5d:00:
b1:80:c8:22:17:48:f9:44:d6:51:05:75:f1:4f:cc:
1f:42:58:b0:cb:ab:d3:d7:4f:63:52:58:22:b4:79:
bf:27:ae:f0:55:d2:b7:4c:ee:0d:74:3a:50:66:22:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:46:C3:D1:7F:0A:7B:BD:74:65:D4:C0:74:C2:F6:F1:99:D5:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afc0b813-90fa-301b-a2cb-55173eca61de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:cd:db:62:8f:c2:3f:c6:75:3b:ef:1c:ed:4a:0f:61:33:af:
6a:35:bf:b2:ec:d4:8c:fe:d1:b9:76:b2:05:f9:5f:31:a8:90:
49:0e:29:af:ef:b1:78:e8:24:fb:da:4e:32:f5:3a:62:5e:2f:
19:6c:e1:59:4c:e0:b3:b5:a3:21:29:fd:b0:de:48:f4:6a:fe:
10:68:d6:06:e9:93:17:93:3a:b1:32:6e:00:37:d4:63:64:47:
74:88:4b:dc:6b:9c:9b:b3:64:76:16:0e:fe:71:c7:71:c4:d4:
b1:5a:69:e2:3a:33:e1:a0:25:96:6d:89:50:99:c1:d5:33:76:
19:56:e2:ba:32:84:4f:12:d8:ec:7d:73:b2:7e:78:9a:88:5c:
a2:fa:22:97:5d:76:41:df:50:3b:fb:6c:a5:0f:21:27:f1:ba:
9b:0a:c0:ca:68:c5:ac:01:ea:2b:54:08:ab:13:29:50:73:27:
3d:cc:c9:cd:af:a2:c9:55:bb:7d:4e:77:91:ae:ed:1d:60:32:
2e:1d:1c:b8:83:d6:0a:92:17:b6:08:ff:a0:fc:9d:d8:45:ac:
44:e1:b2:85:77:71:20:94:64:4c:06:bb:e5:4c:71:f3:c9:45:
aa:b3:d5:e7:fe:4e:7b:d2:71:c0:f5:76:c6:44:11:af:1c:53:
5f:85:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:14 2025 by rpki-client