Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2afac592-6f72-37b0-963f-03266dc27c8a.roa
File: 2afac592-6f72-37b0-963f-03266dc27c8a.roa (raw, json)
Hash identifier: kCA2XoiKUYF7S1suWkCZI6qAYR9NGUYZkuOP7H69w0s=
Subject key identifier: 26:2A:81:10:A0:55:03:98:EB:44:84:E3:DF:52:52:A0:07:C2:51:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BC00481936C174C3BAFE800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2afac592-6f72-37b0-963f-03266dc27c8a.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:c0:04:81:93:6c:17:4c:3b:af:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=9f1e35dc-36ac-4b3b-8495-9371a8008f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:de:4a:3f:83:99:90:c7:28:5a:f4:f0:71:
bf:6e:52:84:9f:67:9a:ef:1e:85:f7:6e:f7:08:dd:
a6:80:2f:bb:0b:f6:28:03:a9:da:dd:81:0b:63:bf:
d2:9c:52:2b:21:56:d3:6e:50:d6:08:3e:77:43:9a:
b4:48:fb:44:35:35:17:70:b7:b1:aa:9a:3a:a6:8f:
fb:c7:50:88:25:21:52:a2:ed:76:64:95:f3:97:03:
0f:ca:40:af:da:8d:3e:ff:3a:85:fb:14:4c:72:86:
61:96:13:c9:48:01:5d:19:b4:1a:d0:4a:53:68:47:
de:a0:45:36:ea:14:45:1a:94:e6:f4:40:25:e3:63:
e8:57:9a:57:6d:39:ac:d8:77:f0:8c:a7:27:b4:23:
31:de:0f:9b:39:6c:f7:a4:86:76:59:b8:c0:00:76:
f6:66:de:b4:1c:f2:01:01:36:52:1c:54:86:59:94:
ef:d4:ae:95:42:a8:d3:e7:e8:43:d6:e2:b7:89:60:
aa:81:f6:d1:eb:2f:90:83:06:67:ee:2f:fd:ae:d6:
d7:45:67:6a:a9:c0:f8:2b:95:14:54:ec:54:d3:38:
4a:96:ca:1f:9f:4f:dd:8e:f1:5c:99:eb:a0:a1:be:
c5:ff:ec:6f:c4:67:2d:7c:66:9f:27:d5:49:a7:3d:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:81:10:A0:55:03:98:EB:44:84:E3:DF:52:52:A0:07:C2:51:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2afac592-6f72-37b0-963f-03266dc27c8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:78:89:77:1a:36:7b:74:46:40:18:86:64:5d:ee:56:3b:09:
a3:f3:5f:0e:60:06:51:d6:0a:89:9a:f4:00:2b:f3:ac:f8:d2:
46:40:f6:d9:db:fa:9c:64:16:4a:d5:ba:d2:42:52:37:b1:2a:
f5:2d:0d:8a:ee:d8:da:e1:1b:b6:f5:69:c6:5c:1f:ea:a6:fd:
aa:ff:7d:d9:16:8f:af:51:fd:0c:fc:8b:e3:05:eb:05:7c:fe:
02:a9:a7:03:15:62:48:c4:31:e5:73:52:a6:b4:a4:63:bb:b1:
a7:f3:a2:22:3a:d5:10:2b:4a:03:46:86:ed:a7:52:79:a3:00:
d6:a0:72:d8:ad:fa:fd:ba:4f:58:a3:ed:0f:ca:09:d2:5d:7f:
3f:e9:14:ef:47:3f:74:84:b4:6e:8d:93:f4:e3:a6:e2:8b:0b:
f6:89:bc:3f:d7:be:fb:33:5f:d0:14:fe:a5:7c:bd:23:6c:e2:
fb:23:46:54:52:99:ff:dc:9d:34:d0:a7:a4:80:59:b7:af:d2:
b4:8b:e3:ac:21:d7:87:91:af:c0:97:68:5f:dd:3a:e4:03:7b:
27:57:63:6c:52:cd:65:00:df:ba:20:f6:14:78:91:33:d4:4b:
67:be:e7:ac:b2:b7:f5:ab:2d:43:51:a0:ae:3a:5d:80:be:5e:
c1:6b:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:46 2025 by rpki-client