Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b697f46f-c672-3326-b003-5045696e1657.roa
File: b697f46f-c672-3326-b003-5045696e1657.roa (raw, json)
Hash identifier: 2Oe8JruXxox4j5Ul/ImsL2G3J8JnOpumkp0pibfFj2w=
Subject key identifier: 95:04:2F:05:3F:B2:1A:19:83:3F:6F:C6:88:69:07:16:DC:E4:50:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9990B20B294B4ABBC65E700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b697f46f-c672-3326-b003-5045696e1657.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:99:0b:20:b2:94:b4:ab:bc:65:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=88a238b3-2c83-4553-a15d-c29c72ed238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:b0:26:d9:75:ee:2a:c2:87:dd:35:92:86:
ed:f4:1d:b7:c8:c4:c8:e5:00:17:43:a1:59:51:12:
29:bd:bc:dd:63:8b:06:25:07:df:2b:ab:28:65:d5:
8d:c8:cd:a1:db:f1:10:eb:d9:1e:46:56:46:7b:78:
5f:67:a0:7f:11:63:97:d1:d9:01:ff:31:65:35:c0:
de:a1:d9:13:20:ab:d4:35:97:b6:7a:74:6d:a7:1a:
40:f8:a6:c0:5a:f5:7b:56:08:2e:4d:c1:cf:d0:84:
42:02:51:4c:ec:dd:31:df:8e:63:e3:1b:17:ca:cb:
33:c4:ae:92:76:da:c9:f1:86:4d:dc:0a:74:bc:ce:
f2:1b:26:07:60:bb:16:04:0d:06:56:33:c3:a6:29:
49:fe:ad:22:a2:27:fe:eb:45:c3:7d:74:a2:62:89:
7d:44:c3:95:eb:15:e3:11:30:4c:5a:10:15:3d:1d:
54:1a:9c:4e:fb:c2:21:15:d6:99:29:e5:c8:9a:f4:
01:ac:43:92:80:62:9f:0f:1d:89:01:02:28:bb:99:
77:fe:1b:3c:fb:29:06:f5:d8:61:74:64:d3:7a:67:
6c:df:2e:05:a8:ec:60:6c:07:74:63:32:4b:39:a5:
e7:5d:01:70:3d:90:3b:cf:e3:88:06:89:59:74:ea:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:04:2F:05:3F:B2:1A:19:83:3F:6F:C6:88:69:07:16:DC:E4:50:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b697f46f-c672-3326-b003-5045696e1657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:21:2c:fc:26:76:23:9b:f5:82:22:fc:7e:05:93:0e:3e:ba:
0c:bb:cd:eb:97:9d:be:ed:2d:24:a9:71:d1:44:c0:78:a8:3a:
9d:02:b7:c2:77:cd:11:72:ab:e1:b7:14:fc:09:be:42:25:d3:
90:f7:47:bf:6f:94:3a:9c:11:11:77:f4:7e:c9:90:6d:9b:a2:
27:42:f9:4b:05:8e:46:d0:36:48:c1:48:fa:c0:11:56:10:d2:
cc:46:6e:fa:a5:5c:d4:13:65:03:23:22:58:75:c4:b9:47:c2:
d4:d0:d1:99:41:25:6b:82:b0:27:38:23:bf:c3:9b:e3:ce:26:
d3:98:fa:7a:7d:0e:3c:19:e3:22:e0:a3:66:d0:0c:d4:a7:6d:
08:9b:86:63:23:8b:39:16:be:35:38:79:64:f5:8e:b4:b2:1d:
fb:d1:b4:ee:ed:1a:2e:5e:94:db:cb:c8:74:ad:d7:30:18:82:
8d:b2:29:87:78:ab:51:f2:cb:d8:ab:41:cd:9e:5e:8d:02:84:
78:d8:b1:30:26:15:16:e5:4c:47:3c:c2:37:e7:45:36:b4:f9:
ac:07:79:e5:41:a6:c8:b9:0a:12:94:c1:95:26:6d:dd:d0:6f:
8a:51:fd:39:d5:53:1b:d2:49:02:2a:d7:00:ab:19:ee:2b:71:
e3:6e:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:09 2025 by rpki-client