Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffe91dc4-a990-34be-991c-37bc385ce59e.roa
File: ffe91dc4-a990-34be-991c-37bc385ce59e.roa (raw, json)
Hash identifier: It2znZjcXoH5xzR/QZqMrmr9ljDdar/OxuhTL7rKwJ4=
Subject key identifier: 35:4B:02:96:8F:22:8E:8A:C9:CD:EE:62:FE:9D:D0:95:7B:1D:04:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E47C3EC9A7FFEB2E651D5A500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffe91dc4-a990-34be-991c-37bc385ce59e.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:47:c3:ec:9a:7f:fe:b2:e6:51:d5:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=4c97e8e2-f59a-4026-943b-b861f5b88ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:80:f2:b8:a7:61:cf:df:04:01:f9:d6:57:
e0:0d:d4:8c:b7:99:9a:2d:78:ed:d0:56:7e:5f:5b:
40:1d:af:d3:5d:c1:18:23:e1:f0:4a:31:f1:af:ef:
50:11:c4:79:0f:75:6c:f4:c5:0b:01:f1:a2:6d:05:
46:bf:7e:5b:2c:7c:04:88:88:01:c5:61:1e:cc:b2:
b6:38:bd:4b:28:8d:6d:e0:e0:17:df:80:1b:68:80:
97:eb:d4:3a:a7:8f:be:b6:25:76:91:5b:cd:4b:eb:
17:64:2f:81:55:cd:f8:28:f2:18:e9:05:8e:2a:0a:
6d:00:cc:92:72:48:a3:a9:e5:ce:ed:6c:41:72:0d:
d2:94:f6:d7:88:62:60:d8:c7:dd:6d:d1:c9:38:cb:
bf:b6:23:79:95:6e:be:59:27:b7:0b:db:d5:ed:26:
40:8c:be:74:23:cf:8b:83:96:71:77:3e:19:9c:f5:
18:3e:46:e2:1b:3f:3c:83:96:ef:5c:39:d4:06:4e:
24:58:cc:ee:be:d8:a2:08:72:e1:62:c4:58:34:53:
fd:6e:46:06:83:ad:a5:9d:97:fe:3e:74:f1:75:8e:
e3:fc:a3:50:f8:e6:0f:26:88:50:3d:69:04:f8:dc:
33:15:f4:4f:6e:09:c2:fb:c5:1e:84:a8:95:ca:dd:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:02:96:8F:22:8E:8A:C9:CD:EE:62:FE:9D:D0:95:7B:1D:04:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffe91dc4-a990-34be-991c-37bc385ce59e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:34:ac:b9:c9:d2:02:49:1c:ad:bd:d8:4b:6a:d5:2f:b7:97:
95:56:12:df:07:70:27:47:f9:fd:d9:eb:6d:da:c6:e8:b0:c6:
28:06:fb:d4:de:1d:ea:8f:ed:2d:f9:a1:90:74:e5:97:13:a3:
16:75:0c:bf:c2:85:54:f1:ed:a8:04:74:aa:95:0d:76:76:32:
77:da:d2:e9:0f:dd:22:74:9a:82:42:5c:5e:21:2e:56:5d:58:
11:66:51:f5:eb:f7:34:05:49:ea:0e:cf:40:c0:50:95:11:ed:
0a:07:e4:e2:d8:82:d7:d1:e7:49:7b:7e:c8:d3:ea:e8:b5:2f:
b5:5d:a2:7d:10:9c:94:f0:3f:68:7a:2f:01:3d:eb:ea:cd:ee:
7d:e0:b2:f3:b8:e5:70:a9:cc:1d:14:87:14:fc:3f:24:59:4b:
25:65:fd:3f:14:f8:25:42:22:4c:ad:52:b6:93:50:d1:92:4d:
1a:c2:4a:65:7d:8c:3b:13:4b:3d:c2:97:6b:88:a1:d5:13:bb:
1e:a9:0f:d0:32:58:fc:45:02:e1:02:b9:32:92:fe:87:e2:5f:
1e:c1:3f:9a:ec:92:37:85:82:06:43:c1:76:1d:80:98:54:2b:
e7:be:a6:b2:ae:e4:1b:cf:19:6a:ca:71:6a:c0:47:be:46:67:
f4:48:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:55 2025 by rpki-client