Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19098e9-5fce-341a-ad14-87862c9d1b0b.roa
File: f19098e9-5fce-341a-ad14-87862c9d1b0b.roa (raw, json)
Hash identifier: 598cQjQigTvhYopfUFhrY8IueWtgO/HgXltxztgzSYo=
Subject key identifier: A7:94:83:52:7D:C4:EF:9C:66:58:EF:81:62:3D:11:A7:9A:2D:60:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9B4F5B4E92C4AE1622EDAC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19098e9-5fce-341a-ad14-87862c9d1b0b.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 7224
IP address blocks: 52.46.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:4f:5b:4e:92:c4:ae:16:22:ed:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=423f5b36-40ec-4805-93cf-17b55995ed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:f9:1f:78:24:a7:c8:7f:3b:79:7d:38:0f:
93:8b:62:c2:6c:58:0b:1f:9e:11:2b:bb:a6:11:c6:
d1:40:1f:a4:ee:fd:83:69:33:f6:a1:94:12:1d:95:
7e:d6:47:d1:34:fe:97:fe:ed:33:95:6c:1b:28:e6:
09:3b:43:0a:f5:73:17:c4:06:a4:21:f5:19:9b:33:
47:4b:e9:5d:b3:57:26:a6:e4:5a:90:57:08:a3:e1:
64:2c:cc:e8:62:3b:60:45:8f:8e:7f:cd:ad:45:3c:
38:54:2f:a2:53:c9:2d:ea:e9:48:c5:b1:3b:5a:06:
e8:77:b3:1a:a4:43:e3:df:3c:ee:31:a3:ad:20:33:
47:26:35:13:5b:e4:09:3b:fb:72:57:28:69:94:13:
f3:e7:39:9f:76:eb:f8:87:60:a6:98:cc:21:82:78:
91:33:f2:55:c1:eb:ad:ed:ac:e2:36:f8:58:71:8c:
a7:ae:03:b0:3a:b3:92:dc:0f:32:95:1d:76:42:0d:
24:18:ea:7a:85:a1:ab:a3:84:dc:9d:39:17:cc:93:
77:63:5a:00:db:0f:41:e1:ff:21:c6:06:ac:fa:69:
df:02:d7:79:7f:82:6a:62:71:32:bf:0d:d3:10:d4:
be:83:a2:aa:97:b1:1c:c3:b8:30:a5:d2:76:1a:58:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:83:52:7D:C4:EF:9C:66:58:EF:81:62:3D:11:A7:9A:2D:60:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19098e9-5fce-341a-ad14-87862c9d1b0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.46.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a2:2c:4c:44:56:f7:81:b7:b0:c9:ed:0c:4d:3b:67:30:33:
2e:34:f3:72:76:19:d1:47:de:18:bb:a4:f8:85:16:5b:23:ab:
56:92:50:b8:20:f8:27:fa:96:35:6f:92:4a:ed:81:2a:53:97:
75:e6:f5:16:9d:90:97:1c:42:34:4b:04:fe:cd:99:be:9c:34:
2b:c7:6f:ba:e8:78:b6:00:78:a6:d1:31:c7:cb:90:81:21:02:
1c:7b:ba:62:aa:50:96:63:da:2e:9d:24:88:bc:ce:8a:9c:4b:
d0:23:9f:70:66:55:2c:96:26:68:b3:d9:c7:17:26:5a:f8:dc:
93:b2:d5:49:b6:c4:b4:e7:cb:b9:65:62:17:fd:07:12:a8:e9:
89:a9:26:07:d7:f4:9f:8d:8a:2c:44:d0:8a:ea:06:e5:5e:0e:
a1:3f:09:15:97:0a:ce:14:00:50:fa:41:58:1a:6f:11:ff:5a:
14:1b:85:28:e6:be:3b:05:7e:05:96:b7:4b:0b:48:9e:9d:bf:
ce:6c:91:75:39:b6:55:e7:84:66:f7:3b:a5:58:fa:75:95:c4:
9e:d7:56:3a:3a:f4:3b:83:be:90:40:08:43:28:c5:e7:63:b9:
e4:40:71:8d:78:7c:de:34:38:07:55:94:bd:d9:e3:32:c4:fe:
66:b1:ee:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+bT1tOksSuFiLtrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NDIzZjViMzYtNDBlYy00ODA1LTkzY2YtMTdiNTU5OTVlZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6j5H3gkp8h/O3l9OA+Ti2LCbFgLH54RK7um
EcbRQB+k7v2DaTP2oZQSHZV+1kfRNP6X/u0zlWwbKOYJO0MK9XMXxAakIfUZmzNH
S+lds1cmpuRakFcIo+FkLMzoYjtgRY+Of82tRTw4VC+iU8kt6ulIxbE7Wgbod7Ma
pEPj3zzuMaOtIDNHJjUTW+QJO/tyVyhplBPz5zmfduv4h2CmmMwhgniRM/JVweut
7aziNvhYcYynrgOwOrOS3A8ylR12Qg0kGOp6haGro4TcnTkXzJN3Y1oA2w9B4f8h
xgas+mnfAtd5f4JqYnEyvw3TENS+g6Kql7Ecw7gwpdJ2GliztwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKeUg1J9xO+cZljvgWI9EaeaLWCWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjE5MDk4ZTktNWZjZS0z
NDFhLWFkMTQtODc4NjJjOWQxYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNC68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCiLExEVveBt7DJ7QxNO2cwMy4083J2GdFH3hi7pPiFFlsjq1aSULgg
+Cf6ljVvkkrtgSpTl3Xm9RadkJccQjRLBP7Nmb6cNCvHb7roeLYAeKbRMcfLkIEh
Ahx7umKqUJZj2i6dJIi8zoqcS9Ajn3BmVSyWJmiz2ccXJlr43JOy1Um2xLTny7ll
Yhf9BxKo6YmpJgfX9J+NiixE0IrqBuVeDqE/CRWXCs4UAFD6QVgabxH/WhQbhSjm
vjsFfgWWt0sLSJ6dv85skXU5tlXnhGb3O6VY+nWVxJ7XVjo69DuDvpBACEMoxedj
ueRAcY14fN40OAdVlL3Z4zLE/max7jU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:22:00 2025 by rpki-client