Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e28a16e2-bbdc-33a3-bd0a-f029163d0c32.roa
File: e28a16e2-bbdc-33a3-bd0a-f029163d0c32.roa (raw, json)
Hash identifier: i8lnurlrOkSgxcDKH9dE6TRkSYKwJgT3fOkbqOst2AY=
Subject key identifier: 71:04:1D:E1:E4:E7:54:F4:E3:B0:37:57:B2:F7:DE:41:46:52:87:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E20E27125992DCBC42AB19F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e28a16e2-bbdc-33a3-bd0a-f029163d0c32.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:e2:71:25:99:2d:cb:c4:2a:b1:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=7f93f92d-5a6a-4cb6-9767-baf81440b941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:57:c0:c8:52:d4:20:0e:d0:a3:61:62:56:
e2:24:89:f9:65:0e:93:61:bc:aa:66:eb:ad:3f:fd:
a3:b2:ad:a1:98:9e:8c:ad:c5:91:4e:cf:e3:5d:08:
e4:f5:86:aa:51:cc:58:d7:33:47:f7:66:19:4e:0e:
31:da:30:94:33:77:cc:03:c7:4e:82:5e:98:c6:c8:
6e:9c:65:e8:8e:09:a2:fc:0a:17:50:22:7c:6e:42:
e7:96:6d:53:d9:d8:83:a3:1c:d1:e3:7e:b9:86:96:
52:bf:53:ec:26:48:71:25:7f:9b:e4:6f:a5:a1:eb:
fb:86:31:14:96:49:53:da:4f:13:0c:a8:91:ce:d5:
fb:c0:b4:19:7b:57:5c:34:98:c8:0c:ab:8f:da:df:
c0:33:5d:c4:f0:97:77:12:a3:8c:aa:c3:b2:25:ea:
af:35:09:e0:21:22:61:0b:46:02:36:5c:8d:0e:cf:
f0:77:9f:ee:f0:59:73:10:ab:4e:2c:e6:df:77:01:
59:0c:41:f3:09:88:65:dd:b2:40:54:78:53:9e:e6:
a8:e1:ff:7d:c2:f5:07:d9:31:90:d7:4d:ba:18:ad:
ab:d1:cb:81:dc:b1:84:7f:6e:7a:b7:8c:74:ad:11:
8b:62:25:da:19:19:8d:35:a4:a9:af:38:8f:ac:de:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:1D:E1:E4:E7:54:F4:E3:B0:37:57:B2:F7:DE:41:46:52:87:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e28a16e2-bbdc-33a3-bd0a-f029163d0c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b5:d4:c9:ac:9e:eb:57:25:16:80:73:a1:73:07:be:58:78:
a0:f3:17:cc:88:fb:53:79:16:cf:6a:3d:e9:7e:bf:62:79:33:
f1:6d:e7:a7:96:c1:c2:5a:42:a2:55:4f:be:92:ff:0f:57:17:
50:72:27:12:00:77:c0:3d:b1:c4:0c:33:10:d1:c1:a7:e1:08:
c1:e1:3e:0e:61:5d:9b:29:4e:d9:93:de:4b:99:74:37:e7:3c:
d1:a2:bd:96:9a:eb:78:36:e1:0f:c5:bd:17:c8:7d:4a:f0:5b:
47:f9:9c:05:a6:f2:35:8e:2e:b8:23:9f:29:29:23:87:4c:d7:
1f:dd:6c:a9:8f:0b:f4:30:17:fe:9d:52:2b:a5:b2:63:9d:b0:
16:c1:c8:56:f7:57:c6:73:6a:ad:ba:7e:b3:34:1e:10:3d:dc:
35:cd:e2:c0:2e:87:55:cd:3f:b6:cc:3a:7a:f7:10:8e:19:5a:
1b:ea:27:e3:28:c6:5a:6e:62:f7:42:20:22:97:69:d5:d4:2c:
0f:c6:c5:07:50:23:f0:bc:4c:f4:72:6c:ae:60:8d:19:51:ff:
4f:e9:f3:6e:9f:21:1c:a2:5b:74:54:86:e9:16:a6:93:77:f5:
77:aa:d5:e9:b7:23:9f:fe:d1:1e:74:74:ab:8d:2c:84:97:57:
2f:dc:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:36 2025 by rpki-client