Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/198043c5-2a8c-3131-86c8-d02208ce7223.roa
File: 198043c5-2a8c-3131-86c8-d02208ce7223.roa (raw, json)
Hash identifier: Oj5SEItt4YY4xjPvxuWGh3jyDaEymd0yXIVlvHoJA1I=
Subject key identifier: 8E:3C:61:52:42:6C:7D:D8:C5:70:20:03:26:40:63:67:F0:4C:4B:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96689DB2D680E0D64BDDE4E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/198043c5-2a8c-3131-86c8-d02208ce7223.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:68:9d:b2:d6:80:e0:d6:4b:dd:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=3d925104-092a-4305-99f1-a569f03e4ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:3f:3b:e4:69:3d:1c:66:18:90:1e:11:1e:
5d:c1:a4:6d:6f:92:46:6d:71:c3:a4:d6:65:90:41:
9c:36:36:0e:ee:f3:f8:b8:3d:a1:56:be:00:29:69:
46:57:55:d5:46:fc:97:06:8d:b4:3a:e6:5d:d2:3f:
22:f4:5d:6b:3c:66:fc:4e:43:0c:ef:d4:5c:52:a3:
84:03:c9:df:61:73:95:ca:d4:70:46:1b:2f:d0:a7:
57:81:99:83:3d:d0:4a:a6:e3:67:95:e2:69:54:1a:
d8:94:4e:56:c1:b7:10:0b:86:98:50:8a:a3:fb:20:
76:d5:87:5b:e5:91:ad:f6:71:08:3b:ce:0c:14:8e:
16:a4:57:7e:d0:52:25:c6:10:4d:46:10:f2:6d:cc:
6b:ac:be:23:2e:c4:de:4a:ac:37:18:5f:2f:f0:b6:
b3:d4:df:e6:f9:4d:69:3c:84:81:37:e6:b9:29:b8:
15:ab:99:9b:c1:13:af:ed:9b:0e:78:52:dc:0e:da:
0f:d5:99:2e:e0:8c:18:fc:91:d4:41:3d:20:ad:c9:
43:d0:7b:f2:0b:3d:86:41:d2:97:e7:41:79:91:48:
2b:2d:80:aa:e1:9a:e2:7d:28:1d:7c:f9:1b:82:be:
e6:a0:8a:68:6f:c4:2b:89:29:65:9f:2c:b6:45:78:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:61:52:42:6C:7D:D8:C5:70:20:03:26:40:63:67:F0:4C:4B:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/198043c5-2a8c-3131-86c8-d02208ce7223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:11:2e:0b:b2:2d:c9:ef:b3:79:04:fd:42:9a:07:fe:a3:c7:
0a:bb:63:cd:5b:0a:ac:41:0c:f5:1a:71:38:10:92:d8:09:e6:
9b:56:24:6b:3c:30:2e:10:7e:80:a2:8f:5b:77:84:55:20:43:
15:be:7b:00:3e:d4:b1:5f:06:6f:c5:85:87:66:47:24:8a:61:
4c:57:2e:45:77:56:8a:82:64:8d:8b:45:45:49:db:8b:9a:19:
dd:df:50:44:8a:b2:75:36:7a:97:b4:a7:cd:e0:e7:52:d0:06:
bb:90:6f:d1:ad:75:6a:7b:54:9a:13:78:ef:cf:a8:2d:bc:fd:
37:66:43:93:8e:d5:a6:2e:4b:30:74:ea:97:f6:be:d7:4f:44:
aa:d9:80:54:b2:f2:a3:ab:dc:e9:7b:1a:e6:65:41:ee:05:20:
6d:78:33:36:5b:55:42:47:e6:a4:46:74:54:c3:c9:0f:da:f6:
02:a2:e4:0b:3d:05:03:73:8d:e4:68:3a:59:88:42:33:82:ba:
33:7b:38:79:9a:6a:e9:b4:ff:40:94:c0:1a:3c:ff:9e:36:bc:
37:12:42:85:6a:51:bc:75:1e:0d:38:a1:cc:9e:fa:6e:41:c2:
6e:46:68:67:9c:26:d1:53:97:21:a0:9a:d2:63:87:4b:ee:23:
84:49:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:56 2025 by rpki-client