Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fac6b4c-7b12-3f61-8db2-ef169dbd203e.roa
File: 3fac6b4c-7b12-3f61-8db2-ef169dbd203e.roa (raw, json)
Hash identifier: MymS8slgpZkT5ZY0fVRYlE0OFxiQbPnLSRzt9/4DdLs=
Subject key identifier: 59:DE:51:F5:3C:0A:73:5D:2A:C2:A1:32:5D:C4:E0:96:D8:AF:E6:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE43F8780C273F2B57357B840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fac6b4c-7b12-3f61-8db2-ef169dbd203e.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:3f:87:80:c2:73:f2:b5:73:57:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=dab24249-48df-4aa7-b726-ee7291777d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:8f:1e:ae:58:df:69:cf:11:b4:b8:40:5d:
b1:ab:33:b0:79:c0:58:ca:37:3b:e4:52:1f:1d:a9:
44:c2:85:ba:b3:fe:a9:4b:e7:ae:f2:d1:8c:1a:ce:
95:5b:6a:7e:3e:eb:52:8e:ae:bd:88:99:db:d8:88:
3b:11:98:5f:69:2b:ca:d9:8e:c7:6a:6c:31:49:e4:
e4:24:f7:8c:9f:64:15:82:bc:e9:cf:2e:61:59:49:
e2:98:67:87:b6:22:12:fd:f6:6e:b6:b3:db:01:b1:
eb:3c:49:b7:7e:ef:50:4c:a2:85:90:08:4a:40:c4:
75:68:5e:f8:98:d8:28:46:f3:77:23:92:c5:da:61:
a0:b0:7c:9a:1f:a6:1c:4a:e0:89:09:a9:af:0f:75:
71:d4:a9:a2:d6:9c:9e:72:4e:21:17:52:aa:f6:c9:
bc:65:f2:9e:fe:be:e2:dc:e0:b3:8f:02:d0:85:9c:
e5:30:cd:a2:1f:69:c8:68:37:ad:b1:8e:8e:97:16:
5b:cd:cf:7c:ba:5e:db:db:64:38:25:f6:6c:a8:a9:
c3:19:85:e5:6a:8a:c6:cf:34:a4:ec:97:cf:64:f9:
f3:17:c5:89:f1:8b:6f:bb:7c:5e:f1:a1:e3:5f:b3:
ea:de:1e:a8:05:23:5f:0f:2c:43:1e:6a:8b:a4:1a:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:51:F5:3C:0A:73:5D:2A:C2:A1:32:5D:C4:E0:96:D8:AF:E6:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fac6b4c-7b12-3f61-8db2-ef169dbd203e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:94:f7:af:f0:90:00:db:27:ce:df:d1:34:1c:95:df:bb:81:
aa:79:ef:e0:3f:93:0e:1d:b4:c4:be:f8:ed:94:60:46:88:dc:
bc:e3:cf:a0:d8:1e:60:c9:bf:b3:5d:56:fd:fa:86:02:51:3e:
4c:d3:c2:b7:89:c0:02:bc:e0:bc:35:7a:32:be:b8:f4:de:ac:
aa:4b:26:2d:78:78:4f:ee:e5:57:6f:28:c0:c9:f9:f9:60:31:
c9:0d:10:23:1f:1e:d6:2e:26:81:20:3c:50:1d:55:53:f4:10:
72:2f:26:07:23:9a:99:32:dc:1f:c2:01:21:38:56:b1:6c:2e:
12:5c:25:f8:7d:65:2f:d1:ac:34:7b:c3:94:17:99:66:b7:fb:
e2:4e:ec:94:c1:ca:df:50:21:45:80:f4:2e:5f:d5:4b:7b:38:
55:ba:21:77:e7:4a:fa:11:92:a6:4a:55:c6:e6:6b:bc:b8:24:
9a:5c:8b:20:8e:ae:ae:ca:ca:11:8e:70:ce:01:5f:93:73:1f:
0c:0d:ed:7e:3a:a7:df:77:f1:f4:8b:86:f7:32:4e:63:06:7c:
ae:62:ea:0b:4d:ec:26:5b:e6:67:72:79:b6:ac:ed:46:4d:00:
a6:d1:70:06:53:a1:8a:b7:90:b0:09:cb:6c:b8:0d:dc:b5:99:
9e:af:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:42 2025 by rpki-client