Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb91e30e-1806-32c9-bb1b-758457411994.roa
File: eb91e30e-1806-32c9-bb1b-758457411994.roa (raw, json)
Hash identifier: h2eh8VJM0MeB+z6hIYG0xIQHLO9bUYgQZzPRa0K0czA=
Subject key identifier: 4D:B1:9D:E9:BA:64:CB:D8:B7:03:AE:E3:96:E4:22:7B:3B:4C:9A:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840472D1CD4D949F4914E628550
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb91e30e-1806-32c9-bb1b-758457411994.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:2d:1c:d4:d9:49:f4:91:4e:62:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=74de987c-3a23-479e-ad68-3805269ce720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:9d:24:a8:63:24:43:9b:0c:8c:d8:b6:1a:
33:46:bb:7d:ea:31:67:61:34:bf:32:3b:0e:24:a9:
60:0d:13:0f:84:01:73:63:59:05:3f:f1:f2:76:6b:
9f:31:d4:a7:aa:00:6a:30:5b:0d:9a:a7:83:1c:12:
90:90:12:45:9e:ae:a9:ad:87:63:4f:8f:5e:cf:c8:
72:0c:99:69:61:7c:a5:fc:29:8f:cc:cd:bb:9f:33:
4b:4e:74:bb:b3:7a:70:fd:37:78:58:6e:62:6f:b8:
4f:7e:4b:cf:18:c8:5e:da:e2:64:4d:3a:36:c0:fc:
ca:e5:4e:a3:da:34:03:ac:95:1c:b4:6a:98:ac:2f:
4b:41:ad:11:1a:75:ea:a4:9d:12:b0:aa:06:f8:c3:
1f:47:48:3d:6e:1d:50:f6:eb:16:36:04:d3:e3:25:
e8:c0:1c:04:3c:98:2b:a8:ce:53:75:a4:50:f9:66:
9c:05:a6:1c:33:6c:b7:93:26:44:2e:43:b1:93:5e:
46:a7:ff:37:c2:a3:ce:9a:8e:4c:b9:78:2b:78:f2:
82:0f:1f:30:7e:2c:c2:a9:ec:ed:87:e1:77:a8:5c:
f0:9c:94:da:24:92:92:a1:9c:96:25:02:cc:dc:ea:
59:e9:0e:cf:7a:31:e5:2f:b2:e5:2d:f5:0e:c5:25:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B1:9D:E9:BA:64:CB:D8:B7:03:AE:E3:96:E4:22:7B:3B:4C:9A:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb91e30e-1806-32c9-bb1b-758457411994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:f6:77:4e:19:30:4f:4f:d3:ac:b7:b0:bd:54:24:ac:92:66:
55:5e:e0:50:00:0e:c1:b7:31:fa:6b:cd:fb:89:4b:c1:a2:cb:
8a:72:10:d8:65:4b:ca:7e:40:bf:06:35:de:5e:61:81:18:4f:
5b:52:8b:ea:d4:c8:57:c0:aa:5b:1e:f2:33:83:fb:da:c7:be:
60:b1:56:ce:54:d8:ea:09:40:d5:fd:b1:99:60:99:fc:81:41:
df:54:0c:fe:a2:ed:4f:7f:0e:d9:40:26:6f:fc:f5:5d:1c:27:
74:d0:e5:56:26:b3:3e:29:d4:63:bd:82:38:aa:f1:35:a9:60:
f4:e6:7a:f5:99:50:e1:f2:4f:2c:6d:02:9f:97:9d:d7:b6:b3:
d0:07:5b:57:19:6d:f7:35:0b:f6:2a:c6:76:9d:d1:29:74:a7:
78:a1:dc:2d:74:0d:01:8d:2c:94:9d:03:29:18:f8:2e:62:df:
8b:3b:da:3d:bc:92:d3:2b:45:1a:f3:4b:66:5e:b1:18:77:50:
8d:92:d1:51:8b:13:ce:5b:d3:13:4f:fa:e2:3a:d1:79:b1:8b:
b5:48:8d:fb:9b:47:95:cf:df:c4:26:49:0b:fa:ff:43:2f:2f:
d0:39:1c:53:4e:8a:c9:14:cc:cd:1c:2b:8f:7a:5b:ad:c8:d4:
ec:0a:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:31 2025 by rpki-client