Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c64584-6e4b-3e49-885f-18d73d8a667a.roa
File: d2c64584-6e4b-3e49-885f-18d73d8a667a.roa (raw, json)
Hash identifier: pan22AIFUVwwRFGxGwLzauA9pjoiJyRXAyH9IE+HglI=
Subject key identifier: 3D:08:EE:31:CD:2D:ED:B3:34:BC:C0:F6:A2:38:D9:B7:75:C4:67:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD1AF4171164BDB3682EFB20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c64584-6e4b-3e49-885f-18d73d8a667a.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:1a:f4:17:11:64:bd:b3:68:2e:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=df9f7e3f-b35b-4972-bd2c-cc26bee8ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:03:07:96:86:47:ea:3f:35:0b:18:13:fa:
18:ee:7a:58:d3:23:38:1a:a9:f1:9c:d9:53:96:0e:
71:35:8b:b8:1e:cb:ad:82:f8:2f:00:94:a2:c6:4c:
12:6f:da:37:97:99:f3:78:a8:25:c8:74:39:19:5a:
30:98:99:82:eb:1b:25:92:82:30:ca:fe:0a:82:b6:
16:04:35:47:44:59:e7:ba:7c:87:0e:7c:af:5e:fc:
1d:49:1d:14:44:df:cb:83:5d:1d:0f:21:d9:8f:34:
a7:c8:5f:42:35:ee:57:ae:c0:e1:c7:76:69:5b:5e:
fd:9b:ba:4a:2d:96:3e:5d:d0:d9:ac:67:c2:54:9c:
15:9e:7c:7a:8e:65:0e:ac:30:78:22:9d:9a:b4:e8:
f6:14:83:f6:fa:81:a5:86:21:6a:6c:b2:77:a1:2a:
18:fd:c0:b7:01:a9:5d:39:c8:be:33:11:09:6f:34:
07:0a:22:eb:9e:bc:11:55:60:3c:af:f4:d1:78:e1:
6e:56:41:75:52:a9:9e:a9:42:38:d5:f1:8a:3c:5a:
e9:a4:85:e2:96:78:bf:40:b5:28:d9:fe:64:b3:4c:
23:61:1c:53:7c:e9:57:be:78:35:bb:50:0c:dc:de:
e4:92:d9:36:99:ee:06:ed:cb:78:77:24:c6:36:51:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:EE:31:CD:2D:ED:B3:34:BC:C0:F6:A2:38:D9:B7:75:C4:67:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c64584-6e4b-3e49-885f-18d73d8a667a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d8:7a:ed:b3:d7:7c:74:90:15:49:3c:4c:93:d9:ef:11:f9:
f9:b5:28:9a:23:fa:54:4d:4f:05:10:9b:d4:82:f1:fe:f0:d7:
21:49:8b:31:f8:0b:31:63:d0:94:b4:2b:cb:d6:ca:26:ec:8a:
8d:4b:74:ba:47:87:59:81:bc:46:3c:7d:91:ed:16:49:b6:f2:
b1:0d:2d:67:72:b5:7d:2e:ab:46:9f:5e:c7:b3:ee:14:a7:bd:
65:cd:13:84:c9:4d:09:12:25:69:9d:16:23:bb:15:33:60:ef:
55:c5:46:59:01:7c:e3:17:58:af:22:aa:23:57:4a:6d:56:b1:
42:49:0c:eb:5d:29:71:c4:16:df:d8:d1:46:95:32:9e:c7:0e:
82:64:bd:f5:60:02:10:c6:bd:6d:37:9c:70:d0:d2:0d:e7:1b:
17:22:b0:69:a2:82:3b:43:75:7b:26:da:82:f2:b2:a9:9d:d9:
cb:a1:bf:92:1c:a7:78:5d:8d:71:61:f4:f6:15:8a:84:09:cd:
2a:d3:31:5b:fa:f0:55:b2:e0:da:1c:a0:58:ff:95:51:8a:c8:
bf:e2:9a:37:d3:34:73:07:2b:8b:5d:50:04:9b:6e:0f:ce:53:
6e:1e:79:32:54:23:48:41:22:a5:b9:e9:15:c7:70:1d:a1:98:
27:35:70:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:33:33 2025 by rpki-client