Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4bef30b-e588-3101-84e5-f5f5f69bea1e.roa
File: c4bef30b-e588-3101-84e5-f5f5f69bea1e.roa (raw, json)
Hash identifier: tGuDM1Vut+tHZyH1O3E/Bo9NYdfc4eQpFwIrJT0v4U0=
Subject key identifier: 6A:B4:F6:89:56:0A:EF:7A:1F:23:E9:11:12:02:F7:35:3C:CE:18:CE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF532E7987228FE7A86583698
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4bef30b-e588-3101-84e5-f5f5f69bea1e.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:32:e7:98:72:28:fe:7a:86:58:36:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=705728d7-9fed-46dd-b584-6e193e1fde2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:e0:ba:c2:8d:91:b7:a7:ec:00:58:73:94:
3f:74:07:87:c2:07:b7:7c:69:ac:24:a4:28:d4:73:
a7:24:61:89:74:16:58:fa:b3:6e:3b:89:25:5b:44:
a3:b0:73:b0:7b:62:9b:47:35:ce:e4:ac:a7:f5:1f:
bb:24:01:13:51:7d:1f:cd:74:b6:71:12:74:ac:d8:
09:51:e8:32:29:5a:f4:e3:a1:bf:8f:87:d1:cb:1f:
ae:b9:0b:30:52:b6:c0:3d:4f:84:b8:2d:4d:0d:d0:
dd:0c:f8:43:4e:38:c8:cb:91:8e:ee:55:fc:7f:3f:
c9:3b:6a:a6:81:6d:9e:84:d2:1e:a9:ed:3f:1d:17:
4f:9a:b4:fd:10:3c:97:e7:0b:bf:61:98:86:ac:a1:
0d:05:f4:e1:29:69:05:86:7b:18:a6:be:5f:7b:a7:
81:75:34:80:28:d5:d5:0a:08:02:01:90:26:6d:e9:
03:2d:d6:41:60:56:0a:ab:23:56:a4:7c:3b:c4:d0:
54:a3:69:11:8f:4b:b9:91:16:44:0d:65:4f:79:6c:
76:82:3f:ab:18:2e:d8:7a:fd:8c:46:d1:aa:62:b1:
81:42:e2:ae:44:00:52:a0:a3:35:ac:4e:e4:3d:57:
10:3a:a8:6b:5b:df:b9:2a:a2:11:b9:91:a4:62:bf:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:F6:89:56:0A:EF:7A:1F:23:E9:11:12:02:F7:35:3C:CE:18:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4bef30b-e588-3101-84e5-f5f5f69bea1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e5:43:0b:3d:78:fe:2a:7b:72:50:1c:a7:75:43:c3:3c:53:
d0:f4:d1:a7:c3:78:c6:4f:7f:1f:e1:3a:4c:ed:0c:63:a5:89:
e2:47:51:63:22:43:02:42:f0:b7:a4:4b:25:1e:72:ab:6d:3d:
7b:35:d1:40:0c:0b:9c:2c:b0:80:03:71:10:3d:34:fa:4f:23:
14:00:cd:b0:70:6d:0c:12:08:27:07:72:f3:98:85:7b:df:65:
8b:c8:6b:b9:2e:33:8d:6c:65:ec:97:c0:f5:95:42:59:15:43:
6b:7d:d1:d4:f2:f7:3c:ed:ff:d9:e0:42:8b:94:1d:7a:55:0f:
58:24:39:d9:2a:81:00:26:7e:2a:08:12:4d:6f:70:5a:8b:8e:
d2:5a:df:cd:4a:98:f0:19:d0:bf:40:70:65:5b:72:28:29:3f:
30:27:57:f6:b0:73:16:06:1f:16:ad:ab:ed:95:5e:4f:e7:b2:
45:e4:89:9e:65:aa:37:27:9b:3d:34:55:ea:4a:d4:b9:d3:39:
1f:53:f2:e1:44:a9:82:be:23:bd:ee:b9:89:a5:57:ca:f6:9b:
aa:eb:0c:6a:a3:8d:bf:5e:ef:6b:a9:23:f6:a6:08:ff:64:e4:
d2:32:66:28:2b:7e:27:12:16:d7:83:f7:db:ec:fa:ac:bd:e7:
f8:7e:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:17 2025 by rpki-client