Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce8df2d8-a60c-36e5-b0ce-4320d8769e74.roa
File: ce8df2d8-a60c-36e5-b0ce-4320d8769e74.roa (raw, json)
Hash identifier: LB6Urc6aJ9IEIkGnlGwSWtVFXhfyIKEuo7V65+LgZ3A=
Subject key identifier: A5:FC:CE:BA:4D:79:BB:46:80:37:EA:74:39:DC:7F:3A:FE:87:21:76
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32813A9A5A0EF57072723380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce8df2d8-a60c-36e5-b0ce-4320d8769e74.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:81:3a:9a:5a:0e:f5:70:72:72:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=40aaf35c-7014-4a6b-944b-285571c301ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:68:8f:e5:17:a3:57:c9:ca:f4:aa:98:03:
fa:0c:26:76:21:7c:50:91:ea:ca:37:dc:9b:af:23:
39:76:bf:7b:f0:15:21:d7:f6:0a:f5:ee:46:cc:7e:
eb:c2:44:e2:a5:7b:6d:16:45:c9:a3:28:07:f2:bb:
8a:09:3c:ea:ee:bc:1c:7a:94:88:a8:3d:1a:8d:c2:
b6:d0:5b:2f:e9:8d:d2:2b:b8:6a:8b:27:6c:88:83:
3e:70:bc:ab:9f:46:02:3f:d7:69:b9:6c:05:07:60:
ab:c5:4d:d8:ab:ec:ec:8c:d1:fb:cd:f7:52:1e:5d:
11:c2:95:c3:38:09:6d:c9:4c:4b:2c:3a:b4:7e:13:
d3:93:56:a8:94:66:c8:67:69:49:9b:57:a7:a1:43:
1d:a0:b7:69:59:ba:d7:72:1a:81:4e:eb:2b:49:f0:
2f:e4:54:65:3a:a0:2f:5b:3c:eb:64:b7:c3:7f:f2:
81:b4:df:9a:4d:d7:94:29:ed:df:f7:7d:07:08:98:
ea:d6:82:18:ea:2b:3f:a6:13:ce:e0:69:b4:e4:3f:
50:d5:77:c0:e8:55:9f:a0:b9:12:b6:ca:0d:ca:54:
0b:bc:8b:90:3a:59:99:78:76:bd:b5:d1:69:eb:04:
0c:82:9c:f7:81:66:b8:ca:50:da:fb:1a:8d:89:68:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:CE:BA:4D:79:BB:46:80:37:EA:74:39:DC:7F:3A:FE:87:21:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce8df2d8-a60c-36e5-b0ce-4320d8769e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:27:9f:54:5e:97:73:71:89:a5:47:32:c5:71:f6:97:e6:7c:
b0:45:ff:db:77:64:2b:ff:74:16:87:f4:1e:27:98:1e:e5:7d:
ae:b0:5a:14:45:86:51:28:47:55:e2:b0:9e:3d:90:ff:cb:5b:
e9:7a:a8:55:be:57:2b:4d:86:a3:67:39:9a:b0:76:51:e9:4b:
00:f5:7f:3c:37:af:3f:ab:ff:a3:1f:64:12:18:20:95:a7:39:
01:b6:c9:fc:88:1d:97:ca:ef:cf:ad:87:6c:13:99:f3:27:49:
a6:55:c6:3f:c0:d7:ea:11:f1:d6:8a:20:95:af:a5:1d:d1:ec:
cb:6d:08:26:0e:2d:a3:0e:cf:0b:88:14:d4:71:36:f4:b6:b6:
4a:27:8a:84:71:16:e2:1a:30:35:33:3b:c4:94:06:5b:06:1b:
84:bd:05:0b:f3:b3:e3:63:bf:a4:b2:74:b4:82:8d:db:79:5f:
7f:6e:c4:08:e1:58:91:69:21:82:ff:3f:5c:32:0b:12:95:73:
d3:76:80:0c:a3:aa:99:b8:b4:04:c6:5e:1a:7c:ba:26:8c:ad:
be:7c:9c:f5:6d:7e:ce:03:c5:38:76:8e:86:3d:0c:af:a6:62:
63:88:ad:fe:e9:23:eb:bb:e2:01:a7:4d:6f:06:f5:cb:8c:10:
f9:f0:a3:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8ygTqaWg71cHJyM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDBhYWYzNWMtNzAxNC00YTZiLTk0NGItMjg1NTcxYzMwMWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUBoj+UXo1fJyvSqmAP6DCZ2IXxQkerKN9yb
ryM5dr978BUh1/YK9e5GzH7rwkTipXttFkXJoygH8ruKCTzq7rwcepSIqD0ajcK2
0Fsv6Y3SK7hqiydsiIM+cLyrn0YCP9dpuWwFB2CrxU3Yq+zsjNH7zfdSHl0RwpXD
OAltyUxLLDq0fhPTk1aolGbIZ2lJm1enoUMdoLdpWbrXchqBTusrSfAv5FRlOqAv
WzzrZLfDf/KBtN+aTdeUKe3f930HCJjq1oIY6is/phPO4Gm05D9Q1XfA6FWfoLkS
tsoNylQLvIuQOlmZeHa9tdFp6wQMgpz3gWa4ylDa+xqNiWiwZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKX8zrpNebtGgDfqdDncfzr+hyF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2U4ZGYyZDgtYTYwYy0z
NmU1LWIwY2UtNDMyMGQ4NzY5ZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWSefVF6Xc3GJpUcyxXH2l+Z8sEX/23dkK/90Fof0HieYHuV9rrBaFEWG
UShHVeKwnj2Q/8tb6XqoVb5XK02Go2c5mrB2UelLAPV/PDevP6v/ox9kEhgglac5
AbbJ/Igdl8rvz62HbBOZ8ydJplXGP8DX6hHx1oogla+lHdHsy20IJg4tow7PC4gU
1HE29La2SieKhHEW4howNTM7xJQGWwYbhL0FC/Oz42O/pLJ0tIKN23lff27ECOFY
kWkhgv8/XDILEpVz03aADKOqmbi0BMZeGny6Joytvnyc9W1+zgPFOHaOhj0Mr6Zi
Y4it/ukj67viAadNbwb1y4wQ+fCjGA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:18 2025 by rpki-client