Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff92d98c-5439-325d-b77a-9cf5faaff154.roa
File: ff92d98c-5439-325d-b77a-9cf5faaff154.roa (raw, json)
Hash identifier: omeYqRN78v8zQGfyAY9r2rz3dvElZEwuSYqjX1eQgD0=
Subject key identifier: E5:40:EE:69:9A:5D:BF:A7:87:25:2D:58:AA:8A:FB:D3:1A:70:92:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D6A97EA556EF3671A3A85D8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff92d98c-5439-325d-b77a-9cf5faaff154.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:6a:97:ea:55:6e:f3:67:1a:3a:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=9fb763c2-caaf-419a-8749-057b30b807eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:8a:69:e7:01:c1:67:c9:78:38:11:d5:d1:
bb:60:23:3d:df:25:a4:0a:d3:a7:da:d1:7c:3d:64:
70:11:c4:ce:50:7c:52:79:f6:a7:d1:51:90:c7:e7:
bd:d8:08:67:eb:66:98:18:02:d7:c8:98:d7:4c:ed:
bf:a9:98:98:6a:1a:9e:16:42:d7:ea:6e:e6:6c:09:
60:2d:1c:f5:68:d5:87:f0:87:5d:c2:ab:03:8c:29:
a3:0f:99:f0:c0:d1:eb:b0:5b:d9:6a:b2:02:d9:3e:
fd:c3:9c:e0:d3:d2:0c:1c:73:dd:ba:57:f6:56:03:
dd:fa:de:85:0d:a3:a8:24:6d:46:30:64:3f:c8:ad:
e5:e7:67:e8:74:b2:61:57:31:d9:1a:db:a8:a7:fe:
94:30:ac:3c:68:59:f7:93:91:25:b1:30:3a:3e:f2:
c3:89:5a:1f:54:c6:e8:34:88:8a:b8:21:62:11:c3:
0e:0c:81:2a:a3:05:df:68:ca:a8:58:ba:48:6d:4d:
60:02:0c:dc:33:b0:98:10:0d:e6:63:ed:fa:a8:86:
09:39:d1:00:6a:f7:b2:3d:95:d4:74:93:92:de:20:
06:ac:94:c8:2b:39:69:7d:f6:f7:76:39:c0:b9:16:
96:d3:6a:24:c9:6a:ec:eb:69:c9:cf:f3:ce:6e:82:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:EE:69:9A:5D:BF:A7:87:25:2D:58:AA:8A:FB:D3:1A:70:92:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff92d98c-5439-325d-b77a-9cf5faaff154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:0c:f4:05:b2:28:5d:c4:a9:77:31:28:1b:fe:25:7f:c0:45:
6e:64:44:61:83:da:2e:83:c2:1a:36:45:a8:06:bf:20:bc:66:
30:18:76:e8:97:b9:2b:1e:5a:58:42:67:5c:bc:c9:b8:f5:bb:
8e:24:49:7d:26:05:af:68:cf:b2:40:d3:14:2d:56:35:24:a1:
c9:5e:a5:ae:4c:f8:36:c2:04:d7:2c:ba:ec:47:6b:56:92:c3:
e1:f8:89:fe:7a:be:9e:7b:ce:a6:8f:8f:61:64:5c:eb:69:98:
68:ad:2c:f0:98:57:6e:8d:f4:89:d6:02:ba:65:5f:8e:3c:e1:
4a:dc:d6:5b:fb:00:78:fe:e4:f3:ef:76:13:27:c1:df:8d:9e:
07:8c:36:c4:63:38:90:8b:a8:bf:b7:11:9b:df:1a:e5:a5:14:
07:77:36:bf:0f:b1:5d:93:48:fd:5f:cf:a3:20:d3:03:23:35:
11:b9:f4:20:b5:e0:ae:d8:ec:f1:37:5e:c9:58:ca:bd:4d:eb:
a1:d3:0e:dc:27:6b:db:bc:9d:2a:a6:04:e3:a4:7d:c2:57:53:
91:8d:68:f3:24:ce:1a:02:b9:0d:3c:c7:df:b6:33:03:96:20:
35:f6:40:d3:5f:27:00:1c:16:47:25:c4:79:da:40:d5:8d:95:
c4:27:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:06 2025 by rpki-client