Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dec0a97f-5d5d-3c75-9598-f39887c45baf.roa
File: dec0a97f-5d5d-3c75-9598-f39887c45baf.roa (raw, json)
Hash identifier: rKQgQ7fTdnYqZNLqp20me24S9jDP0JdMpceDBIt5hqw=
Subject key identifier: 04:68:28:12:35:C5:F1:75:3D:54:CC:6E:56:E8:BB:41:3B:4E:8F:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5A75EBE962D38647DBB85D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dec0a97f-5d5d-3c75-9598-f39887c45baf.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:75:eb:e9:62:d3:86:47:db:b8:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=5011cec1-d3ef-4b8c-8d15-02d04d3820b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:5e:a3:82:e4:40:07:9a:50:8d:04:a1:d1:
52:04:23:10:dc:e3:4c:e2:73:b1:1d:c9:43:dd:d9:
0c:04:42:83:dc:5b:d7:61:00:fd:1d:8f:c1:c4:a1:
50:ef:35:64:db:dc:29:e2:01:99:d8:fd:e0:dc:c7:
b5:c3:86:3b:da:af:44:f7:dc:da:19:23:61:d7:4a:
f1:4e:8f:3d:89:49:0c:02:1f:2d:35:74:44:16:91:
ca:ca:ed:9c:82:09:9f:32:02:b1:b0:cd:f8:78:0d:
a9:f6:b9:88:75:65:3e:7b:d3:8b:34:f1:33:c6:86:
7a:b9:64:19:c1:1f:0a:1c:25:dc:f6:23:66:90:c7:
df:c5:1b:8e:33:23:fe:a0:1d:13:ff:59:19:07:1a:
f4:08:7b:a5:17:10:2f:9d:85:72:01:08:d2:d2:cb:
8c:fe:19:0b:42:b3:93:3d:f7:cb:00:ff:d5:06:d3:
21:0a:36:5a:b7:8b:f7:c0:c3:cf:77:cb:a0:5f:7c:
64:7a:9a:64:b0:17:86:40:e1:5c:60:f3:51:4f:6d:
a3:45:32:50:fd:fb:51:ba:32:45:57:5b:f1:8a:26:
82:30:04:a2:39:87:27:02:3f:c8:c5:51:61:30:92:
0c:1f:53:e5:ad:7d:21:fe:fb:4c:62:7d:c8:ef:83:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:28:12:35:C5:F1:75:3D:54:CC:6E:56:E8:BB:41:3B:4E:8F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dec0a97f-5d5d-3c75-9598-f39887c45baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ae:9c:5f:92:04:5b:62:81:62:db:c2:d7:58:c1:ea:98:e2:
95:40:6b:5c:59:f7:f8:83:c4:a0:03:c3:e9:ee:73:1b:b2:7c:
0d:93:da:52:21:3f:88:69:36:d7:f1:39:b8:fa:56:d9:dd:d5:
7e:fb:1a:14:c6:fe:1a:03:b3:0e:af:63:e5:30:49:a9:0f:bf:
ed:95:59:33:70:b5:c7:08:2d:f6:b4:38:28:2d:0b:d9:d7:c9:
02:36:ff:c0:bf:69:a7:58:68:c8:0a:46:be:4a:df:0d:1c:aa:
e3:59:7e:a3:89:99:a4:96:26:2c:9c:ac:3a:33:e7:11:a8:81:
50:ec:19:42:25:db:f1:a2:65:62:6a:04:2e:65:5c:94:2c:d5:
ee:29:7e:d6:c8:74:69:8b:3d:07:09:ae:82:8e:42:38:3e:5f:
67:a4:72:4c:94:1c:ca:1d:18:40:8c:71:65:c4:5d:55:04:45:
d6:01:c1:59:44:7e:e9:39:0d:d1:20:1f:65:e1:3b:1a:1e:c0:
03:ce:ac:94:a6:6e:92:9c:f1:61:d4:5c:ff:8d:97:d0:83:67:
3d:9e:23:60:69:a3:a4:58:75:59:ab:75:fa:02:26:ed:f3:0d:
55:42:df:58:dd:ae:b4:40:cc:af:b3:77:8e:a5:dc:3f:04:a0:
51:4a:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:53 2025 by rpki-client