Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e3c8d-0538-3858-8d6e-57974a8f6364.roa
File: b00e3c8d-0538-3858-8d6e-57974a8f6364.roa (raw, json)
Hash identifier: rvg3R+4vT6g/0lHprPjLFiYms21IzsPvnbpdnBb9li0=
Subject key identifier: C3:CA:F5:DB:95:D5:33:49:96:A4:CD:BE:66:DE:35:A9:1F:BD:22:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7439C687EBFE2C1A7203CE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e3c8d-0538-3858-8d6e-57974a8f6364.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 7224
IP address blocks: 52.46.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:39:c6:87:eb:fe:2c:1a:72:03:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=85e1357b-a872-478d-9008-b5db0d9e22c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:af:19:42:a6:ec:05:14:fb:8e:65:03:df:
ed:df:55:d9:0a:8e:d7:ea:fe:c3:f2:78:fb:88:7f:
e4:ef:97:a0:eb:86:9a:4e:06:fa:77:c8:4b:68:7e:
c0:d5:3b:51:d7:03:af:d9:dd:1e:e3:9e:6f:c8:0e:
0e:a9:a2:94:4f:8f:38:82:b4:f5:61:cf:35:2e:73:
fb:c5:ed:bf:bf:82:e7:87:cb:c5:f2:72:09:a0:9b:
8a:ef:cd:2c:5d:61:7d:b2:49:9a:ed:94:fa:09:74:
64:da:e5:25:a7:b1:c5:82:0f:56:87:fd:9e:b4:a1:
46:4e:35:ed:8f:67:5c:85:df:bc:7b:d0:d3:80:b5:
db:75:d1:82:c7:36:9e:8b:da:bd:0d:8f:e5:23:29:
d2:62:39:30:58:30:4b:14:1b:cd:77:7c:29:76:e6:
75:bc:c5:ff:ec:16:79:1c:67:a5:f6:b6:3d:ff:f1:
29:ed:2d:a3:b0:2e:78:c1:30:91:e1:21:82:0b:1f:
35:f7:2d:8e:88:15:12:0b:39:d0:63:89:1b:40:34:
f8:8c:ce:8d:07:8d:fd:54:a3:06:70:e6:d4:f7:4d:
e1:ab:da:a6:99:0d:62:dd:bb:38:ae:ea:96:02:d7:
a3:58:c7:3b:37:e5:6b:4c:b6:b6:35:c7:25:5d:5b:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:F5:DB:95:D5:33:49:96:A4:CD:BE:66:DE:35:A9:1F:BD:22:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e3c8d-0538-3858-8d6e-57974a8f6364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.46.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:07:d4:f5:7a:06:7c:b2:a6:8b:4b:69:08:0b:98:c7:57:c7:
f9:cc:cd:e9:a5:7b:40:8f:a3:ad:34:82:1f:2f:5b:55:26:d2:
9c:dd:64:6d:8f:ba:f9:10:0a:81:86:2b:9f:49:57:82:ed:f9:
10:a0:21:d0:fe:30:45:ed:5c:c8:76:9d:a1:51:56:10:92:a5:
28:49:23:6f:4e:db:88:53:37:b4:dc:19:a5:eb:42:37:bb:a0:
ee:cc:24:51:8d:72:b8:9a:c6:30:d5:0b:81:f4:4e:29:5b:93:
14:af:58:5d:b5:b2:2b:b4:0f:ca:79:d4:db:7f:b8:1c:30:2a:
0f:91:92:11:47:5a:72:cc:07:cb:8c:df:d9:07:c2:24:5d:01:
24:79:5a:49:31:fd:83:78:3e:84:93:ea:0e:f1:ca:bf:66:d4:
17:54:93:17:70:a9:55:9d:fe:be:06:98:24:dc:4a:0d:32:94:
a3:9b:0d:02:04:ae:d5:9c:3d:03:70:ac:e9:b0:19:32:84:85:
c0:1f:69:df:00:7e:22:16:e6:47:2c:c4:64:2c:77:d9:dd:0e:
8e:89:be:07:bd:32:87:0c:07:7f:75:22:fe:a9:01:95:73:99:
17:9b:1d:16:4a:93:9c:b5:5d:09:87:5d:e4:36:36:92:af:dc:
42:9a:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:24 2025 by rpki-client