Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2969f72-4915-32e1-8bd2-c564d3d6bea4.roa
File: c2969f72-4915-32e1-8bd2-c564d3d6bea4.roa (raw, json)
Hash identifier: e9ifMfTd7Zl4SjF/TL5jhhp34BNBmNnogtgMjzBp1lY=
Subject key identifier: 74:FE:28:27:0E:DF:10:79:9F:0C:CB:BA:C2:8C:7A:7E:5F:06:B0:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F59F78C118F1023D57E27CD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2969f72-4915-32e1-8bd2-c564d3d6bea4.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:f7:8c:11:8f:10:23:d5:7e:27:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=f4e23dce-3209-45de-9b08-e5254d360f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:86:27:e3:fa:39:7f:2d:cb:8a:e6:57:37:
e9:0c:71:94:1a:12:49:dc:c3:49:3f:d5:8b:76:6e:
9e:f5:00:e3:3a:ff:3d:af:77:8a:3c:f7:48:f9:cc:
9b:44:03:10:2d:80:97:4f:f4:99:86:f5:68:d1:b8:
53:55:11:15:a8:75:d9:c7:b3:64:c8:b7:33:a0:08:
56:a6:ee:93:10:39:e6:1f:63:47:7f:ee:1b:bf:b6:
d6:ea:29:73:9c:e7:44:9b:46:86:cf:4e:24:89:c6:
57:79:f6:e8:21:ac:9d:3e:a5:56:1b:ab:42:12:93:
00:24:b9:7e:21:e7:c2:fe:50:76:57:39:7c:d8:7c:
9b:cc:ea:8f:ff:31:9e:2f:4d:56:91:58:ac:66:70:
51:37:ee:8f:9b:cf:09:85:69:87:17:ba:ae:b0:c4:
cc:3f:f8:b9:a4:ea:e1:e3:f3:9f:38:2e:6d:ec:8c:
b6:2c:4a:61:8b:c3:e9:e3:bf:1d:cc:0c:c3:1c:22:
b5:8a:8c:78:23:71:32:55:e8:f8:0a:06:5a:0c:85:
b7:cc:73:b2:a3:85:d0:41:02:fa:35:17:5a:cb:d7:
c3:6c:92:ef:5f:36:fb:49:54:68:6e:9f:b3:21:bc:
b9:4e:c9:4c:c5:98:28:0d:72:8d:33:c3:ed:e2:01:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:28:27:0E:DF:10:79:9F:0C:CB:BA:C2:8C:7A:7E:5F:06:B0:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2969f72-4915-32e1-8bd2-c564d3d6bea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:df:20:bb:10:37:e6:ac:d9:84:97:5e:09:e2:c7:57:79:84:
be:2d:d2:10:e1:dc:10:a1:d1:08:61:74:e1:a3:da:d3:d8:60:
f2:22:e5:07:7b:e9:be:69:83:28:ce:0b:a4:be:39:5e:31:6f:
ee:b7:4b:5a:59:d4:b5:87:43:00:4c:28:7d:25:2d:e5:5d:00:
68:45:20:6d:2e:b7:91:5d:32:f5:68:a7:c0:e1:d3:79:e1:16:
99:2b:a2:f9:3b:18:19:95:5e:1a:ea:64:b4:54:19:d9:1b:88:
14:8d:db:ec:f8:91:b4:fa:0a:df:f3:bb:dc:71:e9:13:5e:8a:
94:7f:c4:47:0c:1f:d5:00:cf:36:88:5d:eb:48:91:86:26:1d:
fe:15:f4:2e:1b:4c:50:5f:63:1d:14:7b:a6:f9:2e:54:ce:54:
5e:4b:c4:a6:4e:51:9a:41:21:e2:59:1b:3e:82:99:28:e8:69:
6b:e1:0f:cc:65:b8:de:90:0e:70:b4:ab:76:f4:a4:7d:79:f6:
cd:1f:dc:40:2e:db:74:83:29:45:42:94:29:b0:94:55:95:a8:
e2:32:75:80:1a:bb:cf:c1:33:02:e2:fa:2d:7c:3c:6e:83:c8:
bc:c5:48:fe:00:6b:05:b0:8e:41:ba:e4:0d:ff:1f:50:08:fc:
a6:5f:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:10 2025 by rpki-client