Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00b48f5b-47bd-3d87-9f07-477edc059289.roa
File: 00b48f5b-47bd-3d87-9f07-477edc059289.roa (raw, json)
Hash identifier: PRswuwzTG5dhiccgywiJL/kR9+J7L6B0v+ZQUFlmu4g=
Subject key identifier: 52:67:6E:7F:AC:A9:FA:96:22:24:43:DB:93:BC:59:AB:54:43:0F:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D810800D51CDCFDA3D1168000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00b48f5b-47bd-3d87-9f07-477edc059289.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.129.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:08:00:d5:1c:dc:fd:a3:d1:16:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=eac86d24-1435-45f6-9925-0f5029a59dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:4a:64:ec:7c:61:bd:dd:bf:eb:66:61:88:
30:5b:ad:06:e7:6b:54:fd:fd:8d:42:d3:ff:62:1e:
e4:17:e5:29:b4:8a:98:11:65:35:01:f0:db:33:e2:
cd:cd:bf:ae:44:15:06:2f:44:f7:d2:38:d0:03:ec:
cf:89:b5:75:0f:e4:e0:11:2e:4f:3a:7d:02:e3:08:
3d:03:f9:6f:a7:ae:b8:27:e6:ed:ef:6a:59:3e:f2:
cc:f5:3a:59:e1:d2:17:15:4b:2b:fb:0d:35:9d:ea:
81:21:a6:c7:1c:01:49:3b:9c:f0:7a:6b:1a:36:27:
c4:00:01:2b:94:6a:1e:9c:3d:11:0b:0a:16:dc:92:
ed:cd:92:13:1c:34:c8:be:13:21:dd:ce:f1:e1:6b:
39:7f:e8:2e:da:a9:43:4b:b6:ba:a2:5a:d8:bc:92:
1a:d7:42:9c:d6:3d:13:b2:86:44:79:98:aa:ac:81:
7f:ab:56:2f:53:7b:0d:cf:7f:02:c2:45:12:3b:ab:
73:d7:2d:2a:02:b4:87:52:1c:19:1c:26:c4:b9:2a:
7d:07:1c:ed:ef:41:17:40:8d:de:b2:3a:35:30:5d:
6d:50:20:a2:ee:bf:b3:7a:00:e7:d0:58:03:d1:90:
fa:c1:f1:dc:4c:08:b0:9f:f3:2a:33:67:ae:a3:1b:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:6E:7F:AC:A9:FA:96:22:24:43:DB:93:BC:59:AB:54:43:0F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00b48f5b-47bd-3d87-9f07-477edc059289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fb:61:e9:bc:a8:38:d7:36:0f:fa:43:28:b8:ee:69:c1:15:
46:47:b1:65:21:f5:59:9b:7b:de:e2:65:60:38:e4:d6:68:4e:
6b:49:d8:19:96:d6:81:f4:3c:46:e3:ce:f6:17:29:6b:d8:5a:
1e:e0:b0:d7:a8:be:96:59:2b:7c:ad:08:f5:d9:c2:79:74:71:
6e:e5:46:9a:21:22:09:35:06:0d:24:0b:7e:7d:13:d1:d5:32:
57:6a:2f:ce:0d:64:6b:5e:c9:93:e9:3b:61:d2:3b:55:4a:11:
c7:74:99:62:88:53:b9:b3:c1:f2:c7:df:36:75:29:45:ee:58:
6f:40:eb:c2:1b:7a:ca:af:3f:e7:04:0b:bd:a7:61:c3:16:a0:
73:85:3a:03:14:e3:82:bb:d4:80:2f:86:f4:d6:2d:d1:c4:ba:
57:d8:05:2b:fc:1e:c3:03:c2:aa:10:25:a0:47:b1:51:54:88:
a7:af:8c:05:45:bb:c1:25:e5:7c:77:ae:db:27:35:8c:38:d1:
b9:5c:ab:2a:a5:da:7a:00:f2:28:3e:2e:9e:03:55:d4:e0:47:
63:fd:16:45:ef:ae:e5:1c:46:5e:b5:27:73:d4:51:d5:0f:a3:
ae:df:35:13:b2:97:4d:26:2b:21:ac:d7:fb:6e:b3:7b:7d:e3:
4b:7e:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:25:23 2025 by rpki-client