Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9de7e1-b077-37e0-9b03-c7d359802bee.roa
File: 0a9de7e1-b077-37e0-9b03-c7d359802bee.roa (raw, json)
Hash identifier: oI0OiD/Rwoas1lnT5sUVvRUEWip7LdORw2gJrFVAyd0=
Subject key identifier: 8A:D7:AB:5D:F7:38:5E:89:94:FB:86:51:0F:C5:79:E1:8E:4D:A1:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8107EDB3C2C2C57C10490CA8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9de7e1-b077-37e0-9b03-c7d359802bee.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:07:ed:b3:c2:c2:c5:7c:10:49:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a4a8a634-4b4d-4665-af5e-18eb68c23ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:6b:8b:43:57:c3:ac:cd:c9:b3:e9:46:41:
20:cb:5e:cb:6b:df:56:c4:e7:42:09:5b:54:be:df:
03:a1:85:70:fe:77:8b:7f:ce:aa:be:88:9d:00:da:
84:8f:d7:f0:0c:c0:9c:e2:e0:21:39:37:8f:22:f1:
d0:49:37:18:7b:9d:b3:ba:90:2d:b0:f2:77:5b:20:
5b:26:8f:ad:c4:be:37:d4:24:25:a0:16:ab:91:e9:
a5:42:ba:08:4f:ad:8a:da:92:24:ac:45:d1:a7:b2:
d7:31:29:e9:af:1f:69:b0:d3:1f:75:c9:f5:6a:e6:
b3:4d:1c:29:1d:bf:41:0e:0e:66:80:3e:fa:f2:f6:
e6:cf:55:62:0c:cc:8b:ea:c8:4a:85:3a:61:df:37:
44:cc:f9:3c:b4:e6:f8:99:1f:ce:66:57:20:2f:a8:
91:35:c5:c8:8d:92:4f:82:0b:6d:5f:5d:3d:0e:f8:
40:36:1d:a8:ff:69:56:7e:d5:90:b0:50:b9:67:64:
7a:7f:f6:33:cb:07:48:95:7c:53:90:c4:82:82:be:
25:a4:ca:08:32:12:c3:b1:2d:74:7b:8e:35:80:1a:
9c:61:8a:d7:c3:b2:82:5d:27:f5:58:3a:53:ea:27:
88:04:f7:97:f2:9e:dc:58:f9:96:d8:55:15:b8:99:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:AB:5D:F7:38:5E:89:94:FB:86:51:0F:C5:79:E1:8E:4D:A1:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9de7e1-b077-37e0-9b03-c7d359802bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:1d:f5:cf:6e:d9:98:1d:56:d5:85:1d:fa:fe:b1:f5:0c:a0:
29:25:18:67:4f:56:cd:b7:7f:f1:67:03:14:ee:44:71:e2:1c:
d3:d9:a9:a5:42:1a:08:c8:d9:7a:2b:5c:67:b5:94:23:58:3c:
9a:f3:4a:77:d6:ed:09:fa:ff:09:a5:5b:5d:f1:49:94:1a:d4:
b7:53:90:59:fb:6b:0f:9b:09:74:17:7e:8a:9b:71:8c:6a:46:
02:d4:75:df:b5:1f:8a:ae:ca:2f:c4:df:bb:c1:fe:6c:ad:e6:
7c:7a:60:d3:96:f3:6a:d0:bb:6f:d9:93:37:97:e8:a6:7e:e9:
c7:20:42:7f:34:40:ae:da:b4:93:8e:36:5a:42:14:4f:aa:e6:
8f:c0:74:7c:59:c3:89:a0:9a:ae:ec:eb:1c:a7:f2:40:85:77:
93:d6:33:88:e7:d0:b1:4e:fd:7d:51:db:1b:54:ce:00:f8:2d:
17:f1:ab:43:7b:3b:5b:5c:6f:1f:80:8f:67:6f:b4:44:4e:75:
06:3e:df:63:b0:36:a0:54:da:a2:19:2c:98:e6:b7:4e:fa:2e:
73:35:13:76:88:4d:09:7b:e1:21:84:f4:a2:0c:a9:94:67:ea:
82:2c:c2:ee:4e:af:b5:2f:12:ed:07:7c:fe:2d:bf:f5:0a:21:
da:69:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:13:47 2025 by rpki-client