Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e696b74e-3810-337e-b360-1c481574f81e.roa
File: e696b74e-3810-337e-b360-1c481574f81e.roa (raw, json)
Hash identifier: D/Syo/Ya8lotv3F0qT2qOTjau4zmIL1Pfd0Bp2pfRtI=
Subject key identifier: 91:07:AE:77:5C:0F:2E:BD:19:B9:97:A3:1C:18:97:86:F7:73:A3:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E47C3E12395D15D3B2FB54E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e696b74e-3810-337e-b360-1c481574f81e.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:47:c3:e1:23:95:d1:5d:3b:2f:b5:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=f8201c24-c9ee-43ed-b1da-e33a475f7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:26:17:2d:50:fd:7f:d2:11:9a:a0:70:7b:
05:45:76:e6:ed:46:af:3d:5a:84:6e:41:ac:84:d1:
39:60:e9:f5:ac:ba:2a:98:07:52:52:15:cd:12:d4:
54:0f:fe:82:44:c3:4f:eb:1a:80:b2:ea:02:d1:28:
ff:ce:f9:be:9b:ae:64:5e:57:13:a1:c4:77:b0:e1:
9f:9c:83:67:c5:a8:28:31:db:1b:ab:e7:81:55:89:
56:f7:bf:52:6a:fe:96:8d:67:9b:68:dd:3f:77:0a:
c7:da:72:7a:d3:d0:89:18:bc:9b:a0:86:57:fd:fa:
cf:55:9a:03:a2:55:27:5a:72:77:cf:cc:bd:a3:3a:
74:58:45:4a:43:fb:03:1d:8b:1b:9f:66:fc:4b:f8:
bc:2b:9e:59:81:0d:b4:60:f3:38:21:94:40:0a:ab:
7d:f2:c5:e0:4e:0b:28:cc:fd:ac:2c:a9:5b:c5:3d:
ff:8a:72:be:f4:f4:eb:7b:73:d2:7f:ca:4b:60:0b:
4b:ad:62:52:46:72:6d:ec:87:9e:82:6a:d0:d5:0e:
58:01:9d:6d:6a:b7:b9:33:ed:6c:01:3a:67:7a:d5:
34:b6:53:cd:78:37:c3:e0:bd:ff:50:38:f6:92:66:
8d:c8:82:50:ea:c3:b6:c5:b8:6f:52:18:c4:60:7f:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:AE:77:5C:0F:2E:BD:19:B9:97:A3:1C:18:97:86:F7:73:A3:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e696b74e-3810-337e-b360-1c481574f81e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:50:bb:5d:5d:d9:14:d6:18:65:42:f7:07:bb:2d:52:99:1e:
59:7b:26:f4:03:b9:9a:86:32:37:65:14:93:ac:bb:af:bc:fc:
e9:39:04:94:22:fa:52:cf:2b:11:12:3f:40:5d:73:6e:77:2b:
89:64:cd:e9:1c:39:1a:e3:c2:01:82:e8:ce:64:a4:c8:a3:02:
d4:1e:db:ab:ff:6d:0d:83:00:ae:be:23:a0:1f:b8:22:1a:5e:
b5:33:3e:15:c3:d6:74:cc:35:c4:97:b9:8d:79:7f:20:b4:ad:
d9:5f:f2:4e:a6:de:bc:bd:14:d0:fa:f4:b5:94:a2:62:a9:9f:
5d:7e:e7:4f:d2:74:a0:54:97:e4:36:3d:28:07:f8:bf:07:03:
0b:4a:8e:6d:2b:c1:13:23:6e:93:f0:05:7c:92:0e:25:cb:45:
55:1d:5f:47:2d:47:5c:e0:f0:09:6b:8c:c2:15:7b:b0:a6:c6:
88:7f:18:5e:9d:72:5b:16:8a:97:7c:f7:b5:7a:bf:cf:20:4a:
9c:00:b0:c8:d4:f0:8a:05:c0:43:c6:9d:25:4d:91:17:4e:00:
e7:4d:26:a8:cd:0e:00:7b:b2:85:c0:61:95:de:1f:6b:78:18:
e5:e2:f4:92:55:93:30:28:bf:a1:0e:2e:04:4c:b1:14:7e:2f:
ca:32:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:51:00 2025 by rpki-client