Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6bf9568-2566-3383-8038-c085382e256a.roa
File: d6bf9568-2566-3383-8038-c085382e256a.roa (raw, json)
Hash identifier: X/TxHhi7kfwl5NnFHUaviyndhxM7Rm4/MnXKVdq8ifk=
Subject key identifier: 57:8D:10:B9:4F:DC:94:FC:6F:58:04:E8:3F:C7:CF:B1:8F:D8:20:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5A75D27812D74F3812E68600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6bf9568-2566-3383-8038-c085382e256a.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:75:d2:78:12:d7:4f:38:12:e6:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=79f1cb1c-3737-4ae4-b00b-5cbd5ca69765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:bf:c1:76:eb:bf:26:2d:e1:56:7a:3d:ec:
9d:9c:4f:49:f5:31:31:57:25:9c:a3:7f:a2:a5:e8:
52:16:ee:ba:21:c2:f9:14:9b:84:95:9e:cd:88:8a:
bf:c6:34:56:1e:38:9e:ae:41:81:41:1f:54:9c:ff:
fa:92:78:6b:e5:b8:b6:b2:ad:a5:c5:05:7e:a5:6c:
40:3a:50:10:0c:5a:26:f1:30:86:3d:ea:c5:20:f2:
8b:99:8a:1c:b5:9c:01:2c:6f:c1:f2:6f:d9:4c:e4:
02:68:8f:ea:e5:ba:5f:de:cd:5f:50:09:5f:4a:39:
aa:28:1b:fd:fc:96:2a:49:49:29:d2:d0:5c:e0:42:
2c:f7:b5:88:88:ef:25:3e:8d:fe:b6:e3:98:f1:6b:
11:48:72:57:d2:3f:13:73:dd:61:db:c8:14:f0:10:
7d:06:67:c5:19:a1:cb:84:ed:3c:5f:a6:b3:8b:19:
2b:0f:bf:82:86:0e:23:d2:6f:f2:c9:47:0c:d5:2d:
4d:16:e0:02:9b:85:e0:4e:59:1b:46:a8:ff:dd:50:
fd:76:75:e4:8b:18:52:53:6a:cb:52:e9:6a:19:6e:
d3:7d:f2:d2:16:3c:86:f9:31:67:0c:6c:64:6d:2a:
48:56:87:7e:38:cf:65:f3:cf:33:92:93:5a:ed:57:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:10:B9:4F:DC:94:FC:6F:58:04:E8:3F:C7:CF:B1:8F:D8:20:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6bf9568-2566-3383-8038-c085382e256a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:76:09:26:d5:fc:03:84:94:8a:e7:2c:2f:ab:e0:1c:74:ff:
37:c8:db:01:57:f5:ec:a0:fc:1e:c8:fb:22:19:ce:da:59:7d:
23:f8:55:2b:6b:45:7d:6b:fc:35:a9:da:97:61:f2:dc:eb:51:
aa:02:45:9a:a9:78:d3:92:65:90:2a:58:5c:1a:be:ac:54:cd:
91:d6:28:4b:64:ae:7c:4d:e2:13:66:a4:6a:79:fa:3b:db:10:
9b:28:ce:11:d3:20:65:b1:f2:c5:ed:d9:15:e5:89:b4:dc:f9:
8f:2b:62:9e:5f:2f:cd:c7:6b:86:ef:2f:97:9d:cb:7a:78:04:
aa:cc:af:38:37:db:3c:54:bc:8e:5a:f0:ce:e9:80:a4:45:98:
0a:b5:f8:50:29:1f:77:66:5d:d1:67:d6:eb:79:cd:74:a0:e6:
d9:fb:dc:63:d4:7f:d7:df:a8:b3:c6:a8:f7:13:13:89:fd:c0:
f2:5c:c2:28:fa:20:33:e1:74:bd:ae:7e:d3:9e:83:bb:c7:1f:
3f:4d:15:7c:fc:ec:54:e2:ef:9c:3a:62:69:fa:31:9b:52:d1:
91:ec:fe:d4:da:33:cc:1b:61:bc:7e:32:27:c3:e2:1a:41:25:
0e:ee:cd:79:61:f5:60:b5:b6:b2:b1:71:38:82:16:11:85:7b:
f0:d6:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:44 2025 by rpki-client