Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e81eb0db-24df-33a5-812f-d81d276ac4e6.roa
File: e81eb0db-24df-33a5-812f-d81d276ac4e6.roa (raw, json)
Hash identifier: KkuUCiP445JXClEoIYHlsHgnKyqhRTZiBKHyiBChslg=
Subject key identifier: 0E:1C:32:BB:D3:7C:71:15:25:47:42:65:BB:D6:34:28:1F:F0:65:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408EBE82AAF9BF0E36B8CDF7E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e81eb0db-24df-33a5-812f-d81d276ac4e6.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:be:82:aa:f9:bf:0e:36:b8:cd:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=4cf6d214-cd1b-4da8-8f32-5da5beff9d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:ff:ec:21:91:d4:96:e2:7d:56:f6:e1:3d:
07:e5:0b:5e:5a:22:1b:30:17:10:e6:52:a4:34:dc:
c7:ab:71:e5:52:24:47:2f:2e:71:16:df:6c:ca:3d:
bc:87:d9:6c:63:a5:9b:3f:5f:7f:0b:e8:89:51:3d:
1d:d3:94:ff:55:06:d5:ba:03:57:ee:93:f1:ab:4b:
cf:e2:f7:2a:23:28:55:0a:5a:6b:52:8d:55:12:24:
7c:42:01:97:36:36:01:fa:f2:4a:07:4c:63:83:d2:
48:29:29:c4:0a:6c:44:36:36:b7:49:b3:78:60:8c:
6d:85:fc:18:01:ff:3d:d2:1a:30:23:8f:54:9d:c3:
31:d2:04:e5:b0:37:58:c4:41:ec:9f:60:08:2d:bb:
d9:c0:e5:33:fc:6e:59:4a:38:20:bc:32:70:a0:70:
bf:ea:a7:58:cc:98:26:60:20:ec:be:e2:2f:55:f4:
38:57:8a:61:69:12:43:e9:1a:bf:07:1d:81:7e:9a:
76:60:47:7e:5b:a1:ea:8c:10:8a:b0:60:b8:42:07:
fa:7b:5d:4f:39:a5:9d:90:95:69:99:c3:dd:2b:cb:
f1:22:5c:e2:2a:06:1c:fd:e6:e2:37:ca:53:b8:53:
9a:49:f4:21:c2:1f:c2:85:98:c2:a8:eb:cf:49:fe:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:32:BB:D3:7C:71:15:25:47:42:65:BB:D6:34:28:1F:F0:65:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e81eb0db-24df-33a5-812f-d81d276ac4e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:e7:6f:3e:24:23:eb:dc:f5:7a:c0:1e:1f:a3:bb:1a:22:80:
0e:dd:83:9d:96:3d:4b:7b:ff:39:6e:1f:b1:e8:b9:69:49:e3:
75:39:37:14:c7:ce:f3:21:86:8c:ee:84:2e:41:2a:d9:24:f1:
ae:09:2e:88:fa:4a:62:cd:1e:be:38:a8:8f:f2:59:f5:46:fa:
69:eb:37:87:bf:99:d7:4b:e9:a6:09:1d:0e:58:46:2e:9d:59:
5b:7d:1d:ce:39:9f:1c:5d:4b:51:50:25:67:21:81:25:97:1d:
d7:41:f4:17:7f:53:a8:fe:a9:05:11:c6:32:eb:b7:e1:cd:fe:
7f:03:43:3f:13:44:3f:09:a8:f3:d0:f8:8a:74:6e:21:51:52:
8f:e3:2c:d7:71:5d:4b:6a:f9:78:0d:f7:7f:d0:0d:b0:52:56:
58:19:47:9c:06:90:a1:42:3b:8f:f0:35:0d:f6:8d:5d:20:5b:
53:9e:73:4a:d5:c3:de:54:39:0c:2e:11:98:c3:fe:77:f4:db:
b4:80:79:66:c4:99:17:bb:5f:f4:2b:cf:16:6b:5d:cf:ac:2b:
43:f6:7f:3d:ab:5d:8d:43:e6:01:25:af:26:6a:42:3f:05:27:
c9:d5:f7:46:77:ba:7f:5b:8f:13:8b:c5:8f:f4:b3:83:48:2a:
49:ec:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:27:58 2025 by rpki-client