Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd38a733-fc90-3a11-a11a-bce48f326bb3.roa
File: cd38a733-fc90-3a11-a11a-bce48f326bb3.roa (raw, json)
Hash identifier: mWdsX0muAxPrnz5G3QXBZhdJx5M4/Usvgd9rXH+H87w=
Subject key identifier: B2:AD:8F:A3:A4:CD:F8:6B:1B:64:A5:82:EB:55:57:2B:01:48:44:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD2749BE2A7ECB408A456E200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd38a733-fc90-3a11-a11a-bce48f326bb3.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:74:9b:e2:a7:ec:b4:08:a4:56:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=ac3879cb-07f5-49c4-99ba-1d09c312d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:fd:5d:5c:7f:9a:63:cd:d1:92:c8:c0:be:
d8:05:38:73:6c:0e:48:eb:2d:be:42:69:7a:fa:f1:
e9:0b:bd:f6:c3:f5:38:37:f1:de:87:72:aa:b3:ac:
62:d7:fc:58:16:aa:3f:0d:ca:35:1e:22:e7:bb:83:
9a:96:52:c5:43:af:40:80:df:ae:38:f2:52:46:13:
da:98:2c:a8:51:03:60:7f:e4:ac:51:df:f4:99:6c:
ec:55:36:72:45:c8:d5:a3:1a:a2:94:ed:0e:2f:b1:
70:a2:ac:e2:42:e2:4a:1e:bd:f3:c5:ff:84:77:7b:
a1:46:04:06:6a:22:c0:7e:76:c2:33:8f:54:35:55:
0c:ce:d3:16:1b:68:90:37:86:d9:11:fa:c2:a8:b2:
09:fa:5f:59:08:8a:26:45:06:82:e7:54:7c:8c:52:
dd:5a:50:d8:6b:dd:63:09:77:cb:ae:72:39:49:d3:
21:52:fd:a0:a5:fd:2e:a5:19:2e:26:f9:24:d6:d0:
94:ef:19:73:5b:81:98:06:17:db:d1:85:30:1a:85:
78:36:18:fd:c1:8e:11:47:08:08:ec:1a:9d:6d:7e:
a0:f3:04:36:08:67:8e:2f:9e:1b:c8:0c:b9:ea:39:
ee:1f:8d:dd:53:51:1c:e1:a9:1f:14:e3:3c:41:97:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:8F:A3:A4:CD:F8:6B:1B:64:A5:82:EB:55:57:2B:01:48:44:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd38a733-fc90-3a11-a11a-bce48f326bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:89:b0:97:91:6d:09:7c:c6:ed:5a:5f:32:4f:26:a5:5a:5d:
7f:79:91:e1:37:96:3e:1f:a2:61:12:31:22:95:de:e6:52:54:
fe:bf:b9:6e:33:ba:f9:ed:53:d3:4c:2f:b0:ad:f4:b4:a7:41:
df:35:38:6e:d1:54:d4:59:08:56:c7:27:da:70:4e:02:59:50:
d7:30:46:4e:93:1e:d8:86:c9:27:13:4d:6d:f1:23:a3:ea:f4:
78:ae:94:97:42:0b:f1:19:66:a1:19:e2:df:7e:92:f7:c6:e7:
76:56:a4:45:fc:62:83:24:fd:50:93:58:6d:12:70:a2:ef:b5:
39:04:d0:20:78:4a:a6:fd:f4:7b:97:3a:49:55:b5:ec:d2:0c:
88:c4:c2:ce:80:1a:6e:6a:5b:e2:31:ee:55:ae:87:5d:04:0b:
ab:c3:20:9a:31:69:4b:c0:e3:69:7a:c9:37:bd:81:ed:6b:f0:
b5:84:ed:2d:be:3b:80:19:b8:7d:a5:04:d8:ba:b8:1b:6f:0a:
a7:45:85:d2:58:50:77:4a:b1:1b:81:10:a5:55:8d:bc:29:f7:
09:58:9d:fd:f0:90:f5:a7:04:74:b2:ea:de:4a:ec:1f:be:dd:
97:0a:50:b1:13:d7:a0:2c:b8:b6:ad:28:a8:e3:69:51:08:59:
1a:75:4a:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3SdJvip+y0CKRW4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWMzODc5Y2ItMDdmNS00OWM0LTk5YmEtMWQwOWMzMTJkOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEP9XVx/mmPN0ZLIwL7YBThzbA5I6y2+Qml6
+vHpC732w/U4N/Heh3Kqs6xi1/xYFqo/Dco1HiLnu4OallLFQ69AgN+uOPJSRhPa
mCyoUQNgf+SsUd/0mWzsVTZyRcjVoxqilO0OL7FwoqziQuJKHr3zxf+Ed3uhRgQG
aiLAfnbCM49UNVUMztMWG2iQN4bZEfrCqLIJ+l9ZCIomRQaC51R8jFLdWlDYa91j
CXfLrnI5SdMhUv2gpf0upRkuJvkk1tCU7xlzW4GYBhfb0YUwGoV4Nhj9wY4RRwgI
7BqdbX6g8wQ2CGeOL54byAy56jnuH43dU1Ec4akfFOM8QZf+AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKtj6OkzfhrG2SlgutVVysBSEQEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2QzOGE3MzMtZmM5MC0z
YTExLWExMWEtYmNlNDhmMzI2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNN8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6JsJeRbQl8xu1aXzJPJqVaXX95keE3lj4fomESMSKV3uZSVP6/uW4z
uvntU9NML7Ct9LSnQd81OG7RVNRZCFbHJ9pwTgJZUNcwRk6THtiGyScTTW3xI6Pq
9HiulJdCC/EZZqEZ4t9+kvfG53ZWpEX8YoMk/VCTWG0ScKLvtTkE0CB4Sqb99HuX
OklVtezSDIjEws6AGm5qW+Ix7lWuh10EC6vDIJoxaUvA42l6yTe9ge1r8LWE7S2+
O4AZuH2lBNi6uBtvCqdFhdJYUHdKsRuBEKVVjbwp9wlYnf3wkPWnBHSy6t5K7B++
3ZcKULET16AsuLatKKjjaVEIWRp1Sg0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:41 2025 by rpki-client