Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e521e07d-ca09-32f6-bb56-7af7533227a1.roa
File: e521e07d-ca09-32f6-bb56-7af7533227a1.roa (raw, json)
Hash identifier: gRFjl/bqaEVxiYY1pq5wIHLV7/m9HHuwo7SQ2UWCKO0=
Subject key identifier: 09:6A:17:E9:89:92:2E:F8:1B:BB:8A:11:3A:68:54:4B:6B:0F:84:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE1D4A38E2239426210E10C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e521e07d-ca09-32f6-bb56-7af7533227a1.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:1d:4a:38:e2:23:94:26:21:0e:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=78548c8e-68bf-42d7-beff-ba95a55934cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:14:eb:ae:5f:83:a7:f4:80:a2:74:5a:43:
54:1c:aa:64:52:df:22:10:0e:73:0e:9e:e1:44:ad:
7a:88:50:27:02:1a:8b:4f:b0:d2:b3:32:b9:50:af:
06:30:91:42:e3:0b:d1:31:61:cb:d9:28:61:a6:b3:
55:45:4d:66:df:75:ec:da:87:65:a1:14:97:e4:9f:
b3:0c:1b:db:f6:03:79:b2:e5:8b:28:6d:f0:79:55:
c9:b8:7d:71:f7:61:2c:8a:0a:21:cc:69:fc:4b:60:
ab:7c:44:b5:37:e6:9b:ee:29:1c:0a:f3:7d:83:de:
f1:12:74:0c:44:7f:13:ce:fc:e6:a1:8f:27:a5:75:
b2:3d:a4:eb:f5:1f:fa:98:60:e6:9b:d8:6c:51:48:
5a:21:0f:f5:47:8c:30:16:93:65:fa:e1:0e:ee:57:
73:f5:2c:40:32:46:21:5d:69:7b:86:7a:45:e0:77:
75:2e:09:08:89:e3:5e:53:30:00:53:c7:97:86:69:
48:3e:61:5f:fc:76:4c:87:d7:b9:3a:4f:26:44:a2:
d5:87:59:f7:01:0d:6f:4f:1d:08:d2:82:e1:bc:fd:
5e:f6:bf:ba:05:25:b0:d4:61:d2:b8:69:61:6b:f7:
8f:24:6e:8c:a6:75:80:ef:ee:b1:6c:5b:b5:57:49:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:17:E9:89:92:2E:F8:1B:BB:8A:11:3A:68:54:4B:6B:0F:84:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e521e07d-ca09-32f6-bb56-7af7533227a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:66:25:f9:f8:d7:c9:60:9d:4a:a8:45:d3:35:c4:5e:55:31:
e1:0c:c8:65:a6:b8:db:b3:81:83:9d:16:76:36:9d:1b:5b:60:
f2:94:d1:6e:55:0f:d4:da:b2:88:d9:09:c6:81:b5:58:fb:0c:
cf:84:27:ae:aa:69:38:aa:9f:c4:92:24:41:e9:cf:40:9b:a0:
af:c6:90:b4:55:6c:11:df:8e:f2:b3:3a:b2:bb:7e:53:54:c7:
1e:48:6b:c4:72:3a:ca:8b:a4:6c:8e:47:19:af:7b:39:56:78:
c0:cd:fe:02:6b:52:3e:84:40:4a:10:22:1b:18:15:02:70:39:
f7:8e:b7:66:d9:ca:76:a9:a4:6b:fb:e1:58:5e:c4:c3:07:14:
ab:41:c5:68:1f:b6:7f:12:b5:ac:84:f7:7f:27:74:ae:3c:2e:
1a:8b:17:e8:b5:4b:06:1b:82:08:f4:73:dd:78:20:43:04:da:
0a:9f:61:f6:81:ca:d4:48:be:57:8a:3d:95:34:37:b4:27:b4:
45:21:a4:b5:ae:54:6a:e9:4a:78:0c:39:27:53:0f:90:4e:25:
44:fb:ee:55:04:20:31:69:42:f6:29:37:27:e2:c5:8c:7d:9b:
d7:a3:61:2c:e5:80:8c:1a:10:e5:cc:60:90:92:2f:31:42:b6:
de:42:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:34 2025 by rpki-client