Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b69573ed-808b-3747-ac86-685a65fbf728.roa
File: b69573ed-808b-3747-ac86-685a65fbf728.roa (raw, json)
Hash identifier: wCuxDTenMWOdJdTlmGrY+ToiFBinfhu7M9N8q/aWerc=
Subject key identifier: 60:87:03:1C:72:14:D2:5B:81:C8:A1:BA:11:D4:43:F8:31:AA:73:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81169AF186B3ECF453BA1A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b69573ed-808b-3747-ac86-685a65fbf728.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:16:9a:f1:86:b3:ec:f4:53:ba:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=5b53405f-002c-4144-a430-f52d05b38ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:c8:05:d9:e4:94:87:10:f4:f8:a2:a7:7e:
41:7d:7c:47:94:7f:f8:fc:87:c0:6f:41:29:2c:a6:
4a:2e:90:66:5e:1d:a6:45:ce:62:d6:fd:66:e5:a8:
0e:3d:cc:fd:d3:28:75:f1:8f:9a:02:fb:5a:8e:df:
a8:b0:b7:19:f7:28:71:d7:69:06:8a:f4:9f:f7:22:
0b:56:de:30:2f:7e:e8:ed:a0:28:35:9d:57:a2:7b:
25:12:4a:98:15:49:f9:81:87:08:cc:88:7c:3f:4e:
35:ab:d4:45:13:e3:dc:08:a3:50:99:d3:bf:d7:c0:
e6:33:35:ec:02:9f:30:e0:56:d7:aa:ce:c1:eb:6c:
98:87:d5:65:78:41:40:eb:f5:3e:bd:65:d4:2e:e6:
f4:53:ca:2a:d4:d3:f1:4a:20:7f:11:49:97:0c:e9:
60:aa:12:1a:47:1e:85:0a:68:24:41:05:42:d9:40:
10:37:e1:49:d2:34:90:52:19:81:80:85:da:c0:14:
a6:ff:dc:8a:40:72:43:fc:98:fb:30:b5:e5:81:13:
84:12:5c:11:dd:8a:71:d4:14:dd:1c:96:17:a1:01:
4a:f2:9c:4c:a7:58:91:78:07:1b:d3:5f:44:90:c7:
ca:35:e1:2e:8d:9e:5f:44:36:a1:36:54:e3:1d:19:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:03:1C:72:14:D2:5B:81:C8:A1:BA:11:D4:43:F8:31:AA:73:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b69573ed-808b-3747-ac86-685a65fbf728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:b0:48:21:79:ad:a9:51:79:f2:94:95:4e:d7:04:3b:d0:ac:
29:fb:8d:9a:e7:1f:a2:7d:dc:84:29:ac:d3:68:1d:f0:79:3b:
d5:13:4f:5c:86:81:f7:8a:a1:ab:dc:0e:fa:de:69:24:8f:1c:
b6:f7:61:61:35:0d:3c:a0:40:1d:40:c0:d2:52:c0:c4:15:c1:
ee:5a:3e:56:96:11:b4:5c:13:30:4d:ee:17:f1:ec:79:b1:fb:
e2:fe:6d:4e:8f:29:fc:ff:98:3c:53:d7:81:a3:cc:ad:72:3f:
01:9d:cd:41:76:7b:0a:c2:1b:45:7a:2d:ce:ee:ee:3a:6a:66:
2b:56:da:c3:22:e7:67:df:52:ff:4a:a4:be:68:91:e2:fd:1f:
9c:c2:aa:4a:a5:c6:37:03:5e:c4:45:b1:37:61:08:56:9c:5b:
53:6c:bc:d0:e1:38:e2:fe:fa:c3:a4:aa:f9:70:e4:67:e6:7f:
11:7b:28:b9:66:5f:c6:f5:d3:50:5d:c3:f9:ce:cf:62:e0:a5:
56:21:6c:76:7f:f7:79:3a:72:5e:bb:9d:d9:14:bb:6e:3a:01:
59:25:ab:15:87:d1:16:85:57:4e:4c:a5:13:6f:ee:a4:c7:1e:
fc:06:1c:5c:6a:be:e0:7e:14:11:6b:87:87:a9:d7:c0:ab:95:
f9:cb:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:14 2025 by rpki-client