Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b052eff9-fe02-3ffc-9eab-2bf6383c66ab.roa
File: b052eff9-fe02-3ffc-9eab-2bf6383c66ab.roa (raw, json)
Hash identifier: vCV4S1hdzd3CloPIqVdMhk1PS1EgcdXKzKPXsDNKwe4=
Subject key identifier: DD:B1:77:18:BD:A7:24:25:CB:D0:91:63:81:58:08:4A:5C:4D:C9:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406B86F7C38BA8E50447222A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b052eff9-fe02-3ffc-9eab-2bf6383c66ab.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:86:f7:c3:8b:a8:e5:04:47:22:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=677302ee-ba3e-403e-bd1d-409a4d878b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:76:a4:51:14:54:b8:38:b5:fa:aa:82:08:
40:e6:21:25:11:67:23:dd:24:3d:75:9f:c7:2e:f8:
69:3c:3f:45:3c:a0:0d:64:8e:c6:c7:9c:b1:2e:50:
fc:05:3e:90:b8:95:8c:60:d3:0c:d9:17:cb:9e:9f:
cb:b7:8e:57:ee:13:6f:75:ee:36:65:bd:ea:37:0a:
89:49:43:74:a7:d5:4a:14:b9:ca:88:f8:7d:be:6b:
02:8d:cf:52:80:f2:df:d4:c4:0a:db:e0:8d:98:bc:
21:94:f2:49:53:f8:d4:53:94:e8:ef:25:16:67:6b:
e4:e3:9d:7a:d9:52:4f:cb:9e:24:db:e3:a4:e8:3a:
0d:b7:18:60:a9:c4:b4:88:1e:c5:d9:22:bf:78:82:
3f:01:c4:ff:bc:e3:6b:70:4a:85:b0:98:d6:b8:99:
8c:68:28:1e:6a:f4:36:17:7a:08:bc:3e:68:76:09:
9d:f9:d1:38:b3:a9:ea:0b:57:a0:bb:06:62:9d:27:
33:58:00:77:2b:be:69:6c:d5:b5:73:02:25:10:e9:
1b:cb:5b:b5:29:45:ee:c1:49:ab:af:74:d5:5e:9a:
9f:d6:4f:d8:89:b9:ee:e6:27:e3:03:42:5e:9e:1f:
30:47:26:f5:db:9c:c6:4b:7f:57:4a:2b:e1:e5:25:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:77:18:BD:A7:24:25:CB:D0:91:63:81:58:08:4A:5C:4D:C9:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b052eff9-fe02-3ffc-9eab-2bf6383c66ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:21:98:7a:58:bf:b5:db:76:1b:cb:26:85:05:72:e4:1d:a7:
55:b7:7e:32:fc:5a:eb:51:e7:79:03:d0:d9:5a:c3:85:33:8c:
f4:8a:0f:bd:17:62:95:f8:63:6e:19:4d:50:67:ea:f6:f7:58:
d4:e2:67:ba:0f:29:1a:a5:8d:2e:7a:36:d5:39:7f:a2:17:e8:
8a:3b:8e:9c:f6:b7:45:d3:a3:2d:72:19:b0:f3:81:9d:03:3b:
cf:50:90:70:de:9f:54:24:b8:3d:18:0c:07:94:69:d9:ac:2b:
b6:32:be:d5:61:e4:6e:e4:d6:19:40:88:bb:03:52:bf:19:6e:
e2:df:43:e2:fd:97:4d:26:6d:75:2c:44:18:74:9f:03:28:b9:
1a:83:1d:44:4c:09:7f:f3:0f:63:26:28:bc:e7:68:ad:98:7f:
10:64:cf:c6:6f:85:f1:43:36:8f:d7:5d:a1:5c:56:9f:1b:e6:
5a:34:db:0c:da:78:bc:17:ce:b9:f0:ea:18:c8:ff:a5:3e:32:
0f:b7:1d:ee:e6:97:ef:7f:4c:63:6f:d4:08:ee:20:41:79:32:
38:0a:af:ae:c9:f4:59:de:42:5d:af:ec:3c:4c:8b:02:ef:4d:
32:16:5d:08:bb:af:76:1b:fb:56:eb:2a:43:7e:11:fe:1e:47:
b6:8c:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:10 2025 by rpki-client