Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02300eeb-b4fe-35a3-91fc-d12d0df97c0b.roa
File: 02300eeb-b4fe-35a3-91fc-d12d0df97c0b.roa (raw, json)
Hash identifier: 4A8yQgq4vxBAnVWTpkGz1r8T/J/ijw6SkJQ0B/KFCVo=
Subject key identifier: FF:EB:3E:A5:74:DE:D9:58:44:B7:B1:D0:16:9B:4B:C2:71:50:99:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FBF9A6AC359506931E443F480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02300eeb-b4fe-35a3-91fc-d12d0df97c0b.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:bf:9a:6a:c3:59:50:69:31:e4:43:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=740cf746-a619-420a-8c6a-39e96638bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:43:0d:eb:be:ec:48:02:32:de:86:cf:79:
ef:e8:63:00:0c:21:5e:77:42:63:e4:80:7f:5d:39:
a3:72:f0:11:97:09:b8:5f:01:b7:b8:45:b1:61:7e:
d3:48:6e:1d:f5:a4:97:1d:4b:16:fc:b4:3b:27:c7:
3d:a7:d6:fd:e6:10:eb:22:9f:e5:c2:59:a9:c5:27:
2f:4c:38:95:88:26:88:e2:01:a3:72:4e:a1:20:10:
75:7c:0a:1e:d0:ae:ac:90:49:3b:ee:b3:18:ff:e2:
97:e2:2a:3e:9a:a4:4e:2d:16:96:87:d2:2c:69:6d:
25:5b:04:33:17:ee:e9:07:36:68:0c:15:3b:5b:b7:
c0:18:ed:82:83:8a:c0:28:05:3c:8a:49:78:4d:e1:
7a:f7:3f:54:8a:b5:b1:1b:3d:b3:7e:1a:e9:e5:05:
e4:09:d5:35:15:70:33:d6:d2:d8:04:bd:1e:d7:07:
6f:c8:f7:95:78:12:d2:92:a4:d7:51:a0:37:14:0a:
82:eb:0f:7e:80:ab:1d:1f:62:d6:e2:d4:7c:97:4e:
c2:7a:7b:49:89:40:f1:bf:c4:52:56:ce:27:49:cb:
2a:6c:9e:fa:0c:5f:32:19:89:bc:01:1a:63:ff:4e:
4b:3b:90:89:ec:12:bf:a4:81:18:46:35:44:09:75:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:3E:A5:74:DE:D9:58:44:B7:B1:D0:16:9B:4B:C2:71:50:99:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02300eeb-b4fe-35a3-91fc-d12d0df97c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:73:cd:cf:dd:ce:51:67:06:91:60:db:ac:fe:e6:91:c3:f6:
f2:de:2b:e9:73:c4:fd:24:8b:70:75:5d:8d:d2:5e:4f:68:1f:
a6:a0:bd:7d:5d:94:06:ee:34:6d:49:bd:98:4e:4a:e8:0c:33:
76:a9:3d:c2:55:c0:27:50:93:03:ef:22:c1:0c:94:e3:88:e2:
11:07:44:5f:2d:61:9e:2b:9b:31:02:fd:e8:f5:4d:8a:4e:df:
aa:31:44:8e:84:3e:f4:22:e4:fe:eb:a4:ac:c1:41:81:c6:d0:
15:66:91:fb:f4:5f:e1:96:14:d7:39:d8:96:09:69:31:9a:6d:
c0:f5:92:e4:32:b8:f8:a3:18:69:7e:39:e4:cd:42:b5:5d:ba:
b3:cf:a5:43:5b:69:bc:66:b0:49:d0:03:9c:ba:d6:12:bc:f2:
e8:73:b5:4f:9e:6e:ea:00:c8:ea:04:ca:63:81:72:33:c9:de:
4d:88:c5:0c:b6:df:dd:ae:2a:fc:b5:f8:e1:69:91:61:e2:19:
ab:c7:e1:df:d0:59:d0:2d:ab:b8:f4:36:e4:7e:ca:b8:50:e9:
c0:d5:ea:07:80:3d:61:1b:c2:98:dc:99:40:9c:fe:d8:29:6a:
71:73:fb:e1:e0:97:17:c2:03:ce:8d:21:bd:20:66:36:f6:73:
9b:e3:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:48:31 2025 by rpki-client