Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4ca5be2-2ea6-3b51-824c-47d1dc1f7749.roa
File: e4ca5be2-2ea6-3b51-824c-47d1dc1f7749.roa (raw, json)
Hash identifier: T1VKZwld6eO6JiJNcJntyEICZbnof6tA3oZClPNZo9k=
Subject key identifier: 9A:3E:ED:76:02:B7:D7:66:12:95:DB:20:88:BB:56:1A:19:0A:2A:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E964107A2BFAFBEA1382F3086
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4ca5be2-2ea6-3b51-824c-47d1dc1f7749.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:41:07:a2:bf:af:be:a1:38:2f:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=f931bca6-d19d-4bd8-bf48-0253e5dd6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:79:e8:8f:ee:db:1d:5d:59:5f:c7:a9:ac:
f6:b5:13:a0:13:3e:41:8e:04:ef:fe:35:bf:a0:4a:
fd:df:a7:bd:83:b5:7f:a4:0f:fe:10:57:59:be:54:
ce:79:79:78:47:31:f8:c5:24:fd:59:d4:1d:0a:03:
21:0d:f2:40:94:59:39:26:00:48:79:40:66:71:13:
5f:f5:b5:7c:13:07:2b:bd:83:6b:c4:23:6f:20:48:
29:d4:ac:54:fa:de:3a:40:94:fb:d5:08:fc:48:25:
fa:4b:4a:8e:60:4b:61:b0:89:a8:50:2a:20:bb:38:
a2:95:67:3f:f6:79:2e:60:3c:2e:7e:e9:87:5a:13:
bd:fc:ea:85:dd:29:5d:de:32:af:e8:db:3a:6d:c3:
37:9f:14:6b:7d:3a:90:d8:2a:bc:cc:98:4c:14:f7:
60:dc:b9:f3:8b:5f:60:e7:52:2e:e6:33:af:e5:cf:
3b:b9:6a:85:31:1f:2c:57:24:15:1b:54:f4:a6:5c:
fc:cc:fd:b8:6c:76:82:4e:fa:d6:e4:cc:e2:03:ec:
8c:ed:47:11:a6:91:1d:94:96:05:23:45:df:16:04:
3a:19:1d:bb:75:e6:ce:bd:96:fb:de:c2:90:5d:6f:
15:66:0c:64:a3:46:c2:ce:7d:3f:2d:3f:31:af:79:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:ED:76:02:B7:D7:66:12:95:DB:20:88:BB:56:1A:19:0A:2A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4ca5be2-2ea6-3b51-824c-47d1dc1f7749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ad:5f:5d:b4:88:f4:8e:d6:8b:e2:b6:ac:20:75:c6:28:ba:
4d:9d:11:9b:0f:9a:8f:ff:d2:ec:86:a9:e9:9c:cd:8a:c1:b3:
d1:83:5c:f1:d7:11:40:ef:45:5c:06:f6:12:80:ec:68:1d:f6:
ef:2c:00:7f:25:4e:b5:c1:e3:7b:9c:9c:3c:aa:5d:a2:17:b5:
3f:1e:f0:6f:87:25:fd:ef:7f:40:28:4a:9c:e7:c2:33:83:16:
5c:7f:76:ad:c4:73:f3:47:78:e1:53:55:9e:16:b9:15:21:a0:
b1:57:d0:80:5a:ce:bd:3c:eb:b1:3a:3c:c4:3e:c9:cc:a2:fd:
d3:e9:20:44:dc:13:64:1a:4b:31:f5:66:d1:74:81:22:b7:49:
96:2d:0c:bc:c6:d1:c9:3d:c0:20:e0:52:e6:9a:40:82:91:96:
b4:e8:bc:39:0f:9b:a6:a3:2b:5e:fe:82:ee:9a:95:6e:a8:2a:
f8:e3:b0:22:9a:61:e8:80:05:20:4b:be:57:ef:d3:93:a7:56:
de:5c:bf:52:f2:70:8c:e2:de:aa:f9:25:6e:a8:ef:3d:77:95:
57:22:2f:84:4f:cf:f9:fc:2c:a1:05:dd:b6:07:27:1e:93:a1:
83:60:71:bc:73:cc:d8:7e:f2:5a:eb:d5:1c:53:65:dc:2e:e4:
09:81:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:29:47 2025 by rpki-client