Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01799108-43d6-39fb-a9cc-10b6248843ac.roa
File: 01799108-43d6-39fb-a9cc-10b6248843ac.roa (raw, json)
Hash identifier: vES+xaTIZIgg+I57axVanoHWdiwvNtZ1iTUdgoYewwg=
Subject key identifier: 65:C3:10:71:A6:E0:BC:A0:02:22:91:BF:F2:80:A5:DD:1A:BE:09:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3279A9A9C08B628A77D21280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01799108-43d6-39fb-a9cc-10b6248843ac.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:79:a9:a9:c0:8b:62:8a:77:d2:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=007425b7-84bf-4e94-ad6d-98e68c6cd267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:d9:c5:61:9a:e5:9e:cd:85:09:cd:0e:c2:
1b:42:3f:f4:7b:9c:ab:54:98:fd:5e:e6:31:11:70:
78:b1:40:9a:87:c6:13:9f:d8:f2:32:2f:ce:21:e4:
df:af:3d:84:bf:47:cb:3d:7b:24:ca:34:9a:f3:00:
68:4f:d2:42:66:22:22:40:7e:ed:0d:68:8e:39:7f:
cf:73:ee:34:02:4a:aa:6d:43:e1:f0:f5:84:a1:86:
5e:c0:98:2b:78:05:33:6b:7f:1b:a3:90:44:47:07:
e7:97:5f:06:e1:e0:b8:6c:a9:2c:f4:9c:43:c9:2d:
eb:ab:bb:0c:49:69:21:90:95:65:d1:c3:82:47:20:
87:81:c9:7f:e4:f4:f1:61:ae:e7:63:d0:6a:26:37:
d3:f1:1e:26:b6:a3:3a:a1:55:c5:03:f5:bd:8a:be:
31:eb:71:5d:e5:22:91:df:0c:f4:83:84:85:38:33:
52:d9:c0:aa:d8:97:8a:71:0e:91:0a:7e:7d:43:3f:
f6:7d:8c:a3:78:a3:06:51:59:36:38:bf:7b:d5:bd:
b7:35:14:03:b7:d2:7d:27:ad:40:e1:3b:96:b2:62:
9b:7d:94:7a:56:0f:ef:15:e2:8b:82:6f:1d:04:29:
29:0f:8c:05:b6:e4:31:9a:50:39:e4:b2:af:19:5d:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:10:71:A6:E0:BC:A0:02:22:91:BF:F2:80:A5:DD:1A:BE:09:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01799108-43d6-39fb-a9cc-10b6248843ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:23:35:29:01:b0:07:d1:4d:7c:1f:ec:b1:9e:ea:f1:8b:7c:
fa:d2:a1:ee:e6:d6:f7:55:31:4e:7d:34:cc:c0:62:af:9f:b3:
bc:f4:bb:6a:87:2e:00:b5:ac:13:84:81:69:81:91:bf:46:37:
33:5e:b2:9c:39:8c:e4:68:a9:9a:8f:4d:36:e2:e3:9f:d0:84:
15:c7:1e:ff:87:6f:5e:27:43:45:86:ab:aa:38:ce:1a:56:df:
83:de:09:81:0e:db:96:a7:b3:86:e1:27:23:db:e6:88:2c:41:
fd:92:85:f5:f1:76:7d:43:8b:05:89:4f:bf:2c:07:d8:1b:05:
a3:58:54:76:eb:7c:67:17:34:8d:59:57:80:30:7d:05:33:af:
d9:68:b6:0f:2a:aa:43:db:f7:2e:cd:d9:04:ce:ca:2c:e4:45:
f1:2e:8b:e9:8e:2c:0b:3e:a7:33:86:8a:ab:b7:7d:8b:d9:be:
19:88:07:0f:06:e3:3d:3d:a7:24:2d:d3:c2:83:a7:2f:86:78:
90:29:10:63:6d:e8:6c:89:7c:a7:ee:92:a1:31:7d:64:7d:c7:
e8:2e:2d:c3:d2:62:0f:8b:47:cd:20:c3:43:1e:30:4b:eb:6e:
d3:a5:58:70:1d:8c:ad:5f:f1:38:d4:ef:bc:08:27:f4:50:de:
af:98:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:23 2025 by rpki-client