Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ae10501-02e9-386a-b73a-3c9f657d3f87.roa
File: 2ae10501-02e9-386a-b73a-3c9f657d3f87.roa (raw, json)
Hash identifier: u6m1hUE4wtgysIZc6Ut0imPJUcKT+CahpHShtHvGFXQ=
Subject key identifier: 3B:EC:37:27:D3:6E:63:5F:6F:66:CD:B3:90:C4:9E:EA:16:FE:E4:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59FA30998AB8537E4B197B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ae10501-02e9-386a-b73a-3c9f657d3f87.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:fa:30:99:8a:b8:53:7e:4b:19:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=0724be88-5ac5-4f1c-851a-1327d220f86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:c7:e2:3e:fe:4d:f3:3e:ed:0b:77:08:c8:
57:43:81:f6:95:21:4f:ed:08:aa:a6:20:73:c3:59:
40:19:7f:bb:d3:70:cc:21:bf:a0:7b:5b:ea:cc:c0:
f3:88:dc:42:d4:ee:91:d2:82:ef:2b:6b:f8:83:79:
90:aa:09:af:9b:f6:3b:0c:0c:a5:12:c5:82:77:e2:
0a:ce:32:a8:2f:a8:57:4f:c3:ad:d2:a9:f5:2f:40:
58:1e:a3:0f:36:01:42:d3:ff:7c:83:98:66:cf:48:
d3:fe:86:1f:b7:5f:10:bc:ac:96:90:fd:db:f7:6d:
40:3d:32:23:17:43:cf:39:92:92:dc:f5:38:42:4f:
54:d5:87:e8:a9:40:c4:69:bb:6f:f2:f2:a9:c8:dd:
74:99:0a:9d:a5:6c:0f:2d:63:ef:55:0c:ac:9a:d0:
fc:58:8c:3f:e6:f1:60:50:f9:53:86:6c:dd:79:23:
f8:92:cb:b4:6c:4a:aa:5c:13:63:b8:66:73:35:88:
15:22:e3:e4:3d:52:2a:39:bd:e9:24:01:f5:e3:3e:
63:3b:e9:22:8a:3a:5e:e8:13:f3:96:c5:53:02:30:
15:ba:fb:e5:68:11:50:7a:15:f0:d9:29:cf:fd:ec:
0d:11:d5:5c:4c:fb:b8:1b:85:82:23:75:be:62:7e:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:37:27:D3:6E:63:5F:6F:66:CD:B3:90:C4:9E:EA:16:FE:E4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ae10501-02e9-386a-b73a-3c9f657d3f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:a6:72:0d:61:70:1c:3f:b8:a6:f9:c9:57:05:0b:1d:13:b2:
af:f7:67:31:9a:83:ab:85:f0:e0:45:6e:85:22:cc:7b:48:59:
ec:7c:82:65:d7:86:88:98:8f:f3:6c:b3:55:ea:9b:3c:37:7b:
7d:c4:0f:71:fd:3d:c7:bd:25:46:f1:85:d2:4e:95:7b:e8:1d:
3e:d0:9e:9d:ed:d0:df:fe:7e:49:d0:93:e8:f6:c0:bb:55:21:
5c:60:27:9f:8f:e2:8a:97:90:16:37:77:30:7b:bf:f6:ee:a7:
85:57:38:7f:5c:73:c1:0b:a0:39:20:9f:0e:dd:a0:44:dc:a7:
43:10:aa:16:3c:46:66:c9:b2:6d:55:e6:09:75:0c:6c:f5:48:
fa:71:ae:c5:8e:94:42:dd:77:41:21:e8:7f:37:0f:2d:a7:10:
65:77:85:a7:6c:87:c1:43:94:79:62:08:ad:5e:cc:69:11:9b:
d3:2e:8e:4e:32:0d:97:0a:a6:5a:cb:b1:7e:6f:a8:32:7e:3b:
bc:8b:e7:59:d3:35:47:0e:2e:c6:83:f4:86:31:04:22:25:27:
ba:bb:4a:26:d5:e3:ad:8d:e4:0d:19:95:2a:d6:d0:45:1c:f5:
36:48:55:ca:f7:bd:9b:e7:8a:98:08:d7:77:f9:99:5a:d5:92:
7d:1a:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:58 2025 by rpki-client