Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b371f74-1e69-3057-a748-eae96276491c.roa
File: 3b371f74-1e69-3057-a748-eae96276491c.roa (raw, json)
Hash identifier: QStVhlus+6s2t0/lHC+nw+x4Y0k328uV7+ePLXMLIA0=
Subject key identifier: 9E:0D:13:F4:D8:29:95:96:87:99:71:31:64:54:CF:BC:8F:76:5F:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E20B5D140721F091A50AE5380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b371f74-1e69-3057-a748-eae96276491c.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:b5:d1:40:72:1f:09:1a:50:ae:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=44c55670-e986-40d9-8ce8-016142881c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:ce:67:de:f5:fe:fd:5f:11:49:0e:a1:b7:
76:96:24:d2:91:ce:e8:1c:ce:66:b1:83:76:db:c3:
a6:34:84:7d:27:68:7c:48:59:e6:2a:0a:3e:8d:f4:
e1:81:30:62:3e:c1:57:12:5a:67:f3:fe:d3:51:4c:
12:2d:b5:0f:27:d2:3e:de:9d:95:ba:fc:73:c0:8d:
26:00:c8:ab:2c:77:18:92:bf:b8:ec:bb:50:07:3e:
47:5a:1b:ce:13:66:9c:f3:8f:ee:fa:de:d7:8b:d9:
43:11:0d:26:15:1a:c1:9a:db:50:e7:e6:3a:8f:a8:
91:83:c6:20:53:52:e2:c7:ae:44:be:1f:b8:8b:bb:
47:24:be:d2:6b:24:2e:d0:74:c2:20:8b:05:41:17:
25:15:2d:ca:13:e5:1f:e1:4d:10:b2:33:9c:97:3a:
bf:e3:f8:8c:fd:77:68:8d:96:3d:63:99:63:0f:42:
48:ad:8e:87:64:fe:2d:9f:a2:ad:04:12:aa:de:08:
8d:00:91:e2:78:d3:f8:59:6a:14:b5:bf:83:15:de:
66:33:54:2e:dd:c3:9b:2d:c4:d3:00:82:a2:3a:e5:
52:18:87:b5:73:d6:96:cf:da:12:83:73:b4:31:a1:
e2:9b:3d:d8:7b:cf:c6:2d:10:15:ba:b2:59:68:37:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:13:F4:D8:29:95:96:87:99:71:31:64:54:CF:BC:8F:76:5F:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b371f74-1e69-3057-a748-eae96276491c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:64:01:c1:87:26:9f:87:85:2e:50:71:1b:e8:de:6c:0c:b3:
f0:ab:16:16:db:16:e7:87:cf:ca:8c:d7:3f:3b:f5:db:de:9b:
38:3e:e9:d8:16:9f:74:e1:fa:a0:0c:8a:29:cf:79:64:4d:c9:
c3:3d:83:08:0f:af:a1:c2:1d:0b:a3:3e:f4:76:1c:26:b4:34:
e8:26:82:6a:4c:74:be:23:0c:47:3f:b1:61:eb:4f:c0:a0:53:
a3:1e:6f:75:f0:00:7b:8e:06:67:d3:c7:b0:b1:d4:0e:8a:f2:
54:d8:2d:51:3a:59:3e:f2:c5:05:5d:47:10:9f:e4:3d:06:a3:
20:4d:79:f6:e5:75:b8:cd:35:72:43:be:55:25:5f:fe:b9:f3:
96:cf:4e:c9:ff:7f:94:59:e5:a9:6e:2c:7c:d0:40:08:5a:0e:
d9:9f:ad:d1:3e:5f:0e:08:dd:4e:b0:75:26:a0:e3:38:23:67:
03:a0:0a:3f:46:51:df:5c:00:dc:6b:7a:c5:af:dd:f1:24:0b:
43:84:94:d8:78:80:66:62:6a:8c:77:7b:a9:9c:65:77:13:12:
6d:1d:32:06:73:45:28:fe:ff:4f:11:f3:16:33:41:61:41:45:
9f:d1:d7:04:91:54:77:d8:b8:bd:73:f5:35:da:48:1a:5f:fb:
53:23:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:38 2025 by rpki-client