Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3426fbdb-4a6f-336e-a5b8-8601f88b4e0d.roa
File: 3426fbdb-4a6f-336e-a5b8-8601f88b4e0d.roa (raw, json)
Hash identifier: RcQgxvTJvuAviVU7UE2VZXbzuwqcm77C+2hVCH2j7PQ=
Subject key identifier: B9:68:2D:EE:85:AC:7E:46:01:8F:18:84:1D:9E:2D:30:69:4C:38:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59EAC815718ACCBABD5984C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3426fbdb-4a6f-336e-a5b8-8601f88b4e0d.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:ea:c8:15:71:8a:cc:ba:bd:59:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e7b67546-8bc0-447c-b884-9ccffcaf41d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:97:5e:e6:4a:af:f5:d4:f8:41:d3:42:b5:9a:
12:84:85:71:32:1c:1b:5b:5d:22:f8:ff:ad:39:1d:
fb:29:f9:af:53:1c:5e:bf:b3:67:b4:64:32:22:fb:
50:21:3a:24:51:8d:18:40:a1:25:2e:05:9b:a3:6b:
8a:92:a6:06:28:0b:38:dc:11:fc:55:5e:6a:9d:19:
46:d2:8d:39:62:7f:4a:05:70:e1:0b:18:4c:5c:85:
21:f8:2c:4f:3d:c6:47:db:5c:17:1f:cf:40:47:2f:
e4:c8:fc:ac:29:ed:37:d3:43:10:7c:b2:38:49:c3:
42:98:f4:67:7c:55:03:90:37:1a:62:f5:7b:b9:b4:
e8:ca:90:83:50:30:11:0d:71:d6:fa:29:18:c5:5c:
c9:06:c8:29:30:59:4a:86:84:f9:e4:55:f5:af:4c:
30:08:dc:b0:0d:d0:3c:b4:7e:d8:e9:4b:ea:15:3f:
0a:2f:12:2d:1a:88:da:b5:6b:cd:dd:f0:81:a0:ec:
d3:d5:5b:70:52:8e:b8:84:d5:f7:1c:e2:66:cc:10:
d9:e0:ab:58:ae:69:e5:d1:c6:a0:0c:7b:2d:8e:e9:
4e:44:c1:6e:9a:75:c0:b0:4c:4f:20:fe:03:1e:c3:
59:01:27:42:bd:dd:94:52:14:14:77:68:4e:71:23:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:2D:EE:85:AC:7E:46:01:8F:18:84:1D:9E:2D:30:69:4C:38:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3426fbdb-4a6f-336e-a5b8-8601f88b4e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:19:62:6e:a7:9d:ff:e7:22:29:ed:70:1a:19:ce:24:ee:3a:
d0:5a:b7:70:b3:89:be:a3:78:0e:88:90:37:96:ea:9e:8c:f2:
c1:85:3d:32:3f:58:41:ae:79:b1:5a:47:91:59:14:5b:29:4d:
3c:ef:d4:70:e5:6e:89:cf:38:7f:2c:b9:31:a4:dc:2a:d7:6f:
f3:16:24:40:cf:76:fa:dd:7b:c9:c7:02:c1:36:dc:01:aa:05:
a9:fb:ff:5c:ef:5d:85:9c:6a:17:43:9a:3b:b3:59:2b:9c:be:
69:62:47:54:d6:a3:12:e5:3e:14:7b:82:2d:7d:3a:64:c5:6b:
43:0c:06:0e:90:39:e9:7f:5c:9a:e6:3a:55:56:cc:e7:04:7f:
54:25:2d:14:d8:22:12:da:cd:0a:00:72:ff:f7:8e:3c:bd:96:
ca:6b:b5:82:eb:d9:98:b6:14:d9:1b:89:31:39:bf:b9:f2:26:
99:d3:8a:18:ef:fc:65:43:89:73:7b:97:3f:8e:c5:73:83:82:
fe:f8:44:8d:10:c1:2c:34:4a:51:7e:82:ca:ec:2e:32:26:a6:
a0:57:13:eb:78:0b:3c:d8:27:c4:4c:7f:ad:d8:c7:c1:e9:f3:
95:02:24:65:5c:f9:96:8b:f3:b4:6a:ac:6f:ef:10:28:55:bd:
db:5b:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:43:19 2025 by rpki-client