Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef01bc58-99fd-38f3-8790-44e10ce8d055.roa
File: ef01bc58-99fd-38f3-8790-44e10ce8d055.roa (raw, json)
Hash identifier: gre8ZWi++XE2kNccvNrBpQopwHWptS665R7znytxfOE=
Subject key identifier: 36:11:56:08:84:E8:BF:4F:D0:92:17:1F:08:AD:D2:DD:4F:BA:41:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E20AE935827151D625B686800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef01bc58-99fd-38f3-8790-44e10ce8d055.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:ae:93:58:27:15:1d:62:5b:68:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=d551d939-abce-4c2a-a3d0-2d65b59ca789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:23:7b:2a:05:52:d6:d2:b1:07:3e:75:e8:
97:c8:8f:d1:67:f8:b1:7e:fb:fa:c2:40:93:f9:de:
06:57:7d:a5:45:26:0a:4c:3c:70:de:84:ed:72:d4:
35:c4:ab:b3:b4:df:4f:0a:9e:89:98:0f:b5:bc:22:
d9:f9:aa:9c:6a:ae:18:f5:54:2e:42:2c:dd:2f:4f:
a2:fb:a7:cf:03:5b:b2:78:02:10:34:7f:fd:f9:48:
ea:ac:0b:19:56:c3:b3:fa:a3:a8:52:4c:6d:dc:7c:
19:0c:e3:72:ff:7c:78:7e:d6:3c:dc:b2:64:b0:7c:
01:3a:9f:3a:58:e8:26:36:12:04:09:97:1b:12:55:
cd:c2:fd:9c:7f:2f:78:ec:b9:97:05:28:b0:2e:cc:
25:95:d8:0b:35:20:74:64:39:8e:4d:14:db:5a:0f:
dd:45:66:e3:95:93:6e:0c:cf:62:0d:f6:96:b8:1b:
14:85:53:b4:21:da:e5:02:a1:ef:46:93:35:2f:be:
14:c1:bf:cd:a5:1a:e1:56:7f:f9:0f:4b:75:ff:b8:
4e:2f:2c:93:2b:5a:35:c9:15:a8:ef:50:19:27:0a:
6f:cc:f8:62:4d:e1:13:91:9b:14:59:2d:44:6a:87:
69:03:f5:31:e1:a9:27:88:57:a0:7c:46:c9:1e:cb:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:56:08:84:E8:BF:4F:D0:92:17:1F:08:AD:D2:DD:4F:BA:41:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef01bc58-99fd-38f3-8790-44e10ce8d055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a0:78:2d:f9:9d:d8:30:84:42:c9:53:e0:d5:b4:9c:97:03:
6c:cc:db:4b:6a:b2:33:f8:76:8f:d5:ec:1c:d5:bc:dc:33:ce:
12:46:70:d4:14:e9:a2:b9:78:72:04:d6:b6:d8:10:6b:cb:ff:
80:ef:0a:33:2d:6b:89:59:11:12:49:78:e4:d1:1e:26:40:4c:
d9:eb:12:49:43:85:c0:42:1b:24:a7:d6:60:0d:ba:0a:0b:29:
5d:7a:ce:86:a5:8d:74:b9:38:15:c2:3a:a1:47:71:22:47:ea:
04:99:d8:af:4f:87:54:0e:fe:60:f7:c7:03:9d:f7:a4:25:81:
fd:0d:ab:0a:9d:0b:f8:04:d2:85:49:a1:fa:18:d6:35:68:a6:
a5:9a:84:92:13:9f:52:7f:90:70:5c:0e:b7:c6:83:4a:36:e1:
cb:be:54:29:0c:b8:bb:dc:98:e9:ca:cd:76:d8:59:d9:f3:6c:
02:58:c1:74:60:03:42:70:d2:22:5c:88:d5:bd:58:5f:2b:6e:
ca:a7:c7:04:b6:2d:6b:76:8e:7c:aa:78:49:ff:21:00:74:32:
71:63:5e:b8:fc:c7:df:ed:af:ac:84:e3:fa:d1:55:92:2d:c2:
b7:9e:95:1f:c8:b8:e1:e7:1a:9e:6f:4d:4a:aa:45:11:46:ab:
62:f3:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:35 2025 by rpki-client