Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2a1871b-3115-302b-9c2e-8abb62c04dca.roa
File: b2a1871b-3115-302b-9c2e-8abb62c04dca.roa (raw, json)
Hash identifier: LS+D/m/YFPVFJD2lX+OTP/rwj8XXFlXrw8vGpBTUFoY=
Subject key identifier: D6:5A:06:5C:62:75:1F:0A:FA:84:FF:C0:76:D5:A5:45:B9:77:35:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96486320C47668C58BE7DD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2a1871b-3115-302b-9c2e-8abb62c04dca.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:48:63:20:c4:76:68:c5:8b:e7:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=e064a736-f7ce-4168-8ca0-2910f59e205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:81:08:86:48:57:8e:10:cf:5c:5d:77:5a:
3b:d4:75:61:8f:24:f7:3c:f8:25:45:e8:1e:ff:de:
a3:26:1d:80:30:c9:ef:0a:5f:71:56:a9:4b:77:a7:
f7:d6:e5:cf:4c:3e:d9:42:a5:3d:44:53:b9:d1:80:
bf:01:0b:53:7b:90:fe:05:1b:16:92:42:4e:bb:32:
06:82:e4:d3:31:70:61:22:e8:ab:03:c2:24:28:dd:
01:87:df:42:a8:9f:93:55:3f:b8:d1:e3:39:0d:54:
72:df:2b:81:29:2b:a7:ef:16:db:56:48:60:3a:44:
4a:c5:e6:74:52:d0:97:99:b2:aa:45:e9:2b:09:2f:
4b:4d:a6:c6:d5:84:9f:fb:19:bd:0c:da:58:5f:8e:
1a:68:2a:17:66:3c:09:72:6b:9b:7b:2f:02:1f:22:
a2:f4:29:16:1e:ae:74:40:2f:ad:72:66:b9:35:00:
bd:eb:27:97:10:70:49:d3:82:12:c9:73:89:54:55:
10:d8:b0:25:15:8e:d5:34:20:38:0e:52:27:ac:7c:
a1:f4:c9:a6:73:f6:65:59:88:6e:fd:f8:43:cf:89:
f7:6e:b3:d3:37:33:f3:2b:53:72:b6:5c:fa:19:1f:
1c:1b:53:4c:e2:b0:32:26:ed:ad:94:32:f0:91:92:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:06:5C:62:75:1F:0A:FA:84:FF:C0:76:D5:A5:45:B9:77:35:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2a1871b-3115-302b-9c2e-8abb62c04dca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e3:e2:f1:1c:39:a7:f2:c4:d9:7a:08:34:06:00:6c:1a:ae:
cb:d3:15:fc:e7:1f:a3:ae:7b:16:fd:4a:3d:db:d7:6a:9f:19:
d0:24:a2:e3:d9:65:35:df:d2:85:c4:08:e4:82:41:4f:5f:ba:
cd:94:4a:75:8e:f6:2b:2a:69:af:49:3b:4a:fd:72:0a:3a:91:
b7:08:0f:36:0a:e1:b7:75:8c:7f:ed:96:f4:a1:78:5a:87:40:
2f:c7:63:a9:5c:9e:f8:7c:6b:71:07:a0:10:d0:74:58:7d:43:
a7:b5:ed:5a:61:cc:37:e7:37:e7:6c:4a:52:ac:b6:46:31:fe:
53:41:d1:02:f4:11:53:98:69:c5:8a:10:80:0a:54:9a:d6:24:
b9:0b:0c:66:fd:e4:8f:73:b9:3e:14:6a:f9:23:d1:66:67:3e:
36:56:de:60:73:bb:d7:90:0a:d7:ef:f3:0e:fe:71:59:cf:9b:
ca:97:03:52:07:6c:34:71:94:de:98:36:cb:6e:9f:5c:c9:1c:
4b:eb:02:1d:ef:84:a6:53:6c:46:3d:ba:4a:ab:13:1a:a5:47:
ce:7e:a5:93:97:1f:3e:8e:07:e8:7d:32:f8:36:d9:cf:78:98:
b7:ac:5f:0d:ec:d8:5f:93:17:cb:00:aa:5b:ad:50:26:46:d5:
4b:3c:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:37 2025 by rpki-client