Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f951aa40-689b-3c70-a823-70d8c4310236.roa
File: f951aa40-689b-3c70-a823-70d8c4310236.roa (raw, json)
Hash identifier: icQp329jzV6EU5TExT/SXROehbaO31+viy9Fu+JHvXc=
Subject key identifier: ED:E6:BE:75:B6:E4:18:BA:9F:7B:CD:CC:F2:14:57:BB:6C:54:C0:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9B248FA6849C7ED42E05600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f951aa40-689b-3c70-a823-70d8c4310236.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:b2:48:fa:68:49:c7:ed:42:e0:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=dcca6cfc-b8c9-4c97-b5d3-451661784b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:53:92:5c:1f:07:ad:49:63:41:d2:8d:13:
a3:11:f9:16:e6:85:1b:5c:9c:75:ab:32:d0:d5:ce:
58:5c:a9:48:67:78:14:7e:a3:24:6b:de:ef:04:82:
9e:6f:81:a0:24:20:b3:2a:e0:35:66:62:72:3e:83:
d6:bc:de:22:ca:e4:31:72:a6:e9:e2:e6:e5:e0:eb:
6d:ae:29:b8:06:db:09:dc:7e:86:bf:23:29:ef:dd:
30:3f:67:22:d6:da:db:0b:ca:a9:ed:b9:29:26:d7:
27:51:36:d0:4b:bb:0f:a4:6b:0d:47:fc:94:16:fa:
bd:0b:e4:12:9b:3e:ac:f7:d9:eb:32:c8:d7:d7:c4:
61:2b:ef:a4:9f:05:6d:67:93:fa:23:df:f9:52:97:
b8:c1:ab:f2:c3:9c:19:8e:34:8b:d9:b8:99:5a:e3:
6c:44:41:a0:d9:7e:3c:38:d1:37:76:63:07:ca:2f:
25:55:db:4c:ef:7c:0c:a7:db:f8:65:6e:1c:fd:85:
89:7a:76:db:14:f7:36:bb:86:9f:18:95:7b:18:78:
eb:90:40:c3:56:21:5b:7f:ae:23:bc:77:8d:d7:5c:
f3:39:93:6b:b2:88:e2:94:e3:ae:92:4e:cd:58:d4:
e1:9d:35:5b:b2:d8:bf:1a:88:45:39:ee:63:4a:36:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:BE:75:B6:E4:18:BA:9F:7B:CD:CC:F2:14:57:BB:6C:54:C0:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f951aa40-689b-3c70-a823-70d8c4310236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:19:7c:81:5a:7f:6c:db:20:f2:b7:3b:ef:f9:b6:8d:57:93:
ec:f6:6e:27:0a:06:90:f6:f7:ce:70:b1:1d:fd:fc:5b:89:6b:
4d:d2:65:e4:2e:33:4f:da:06:bc:e5:65:53:55:7f:31:44:cc:
d2:6f:b7:bc:4d:af:89:af:f7:c0:ae:6c:47:8d:f6:79:37:0a:
9a:6c:db:be:3b:2f:9e:de:57:24:c0:54:47:44:8a:77:58:8a:
0a:9f:0e:4c:69:19:c5:e0:f8:86:ce:7e:56:d8:41:05:3d:c7:
fd:3d:27:b8:ce:f5:7d:e4:9b:90:60:c2:f7:ee:84:04:ef:f2:
61:e7:14:3c:e1:74:2d:96:fa:b5:ed:b3:c9:3e:04:7a:8a:61:
82:b7:c3:b7:5c:b4:a8:19:c9:3c:d4:c7:0f:64:df:79:ea:2e:
d1:cf:a7:08:db:6c:ce:37:13:09:ee:70:ae:ed:59:26:7c:ea:
e0:75:fb:7e:36:f0:fc:54:08:58:d6:2f:ce:c3:c6:d4:cc:c8:
ec:38:0e:7b:85:66:cc:3d:17:5c:15:d1:d1:0d:39:fb:6d:4d:
6e:b3:e5:03:2f:4a:8f:9f:05:12:af:64:98:b3:f5:e6:89:9d:
d4:1b:f0:08:0d:78:4e:53:08:7a:0b:6c:da:9a:64:d0:dd:3b:
47:d0:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:52 2025 by rpki-client