Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407fa8b9-7b75-341b-bc67-f284b5180c7e.roa
File: 407fa8b9-7b75-341b-bc67-f284b5180c7e.roa (raw, json)
Hash identifier: q4RnTec35wJPqvqRk+l2kfxDgBsFdMOCOLDbC/J1uAk=
Subject key identifier: DF:86:4F:C6:CF:08:39:00:55:F0:29:7D:CD:BB:A6:B4:08:45:AA:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1B84453980C9197BD2F1000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407fa8b9-7b75-341b-bc67-f284b5180c7e.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:b8:44:53:98:0c:91:97:bd:2f:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=c94b40c0-8313-487c-845b-67d675941abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:0a:f5:bd:78:90:8d:94:6e:d0:d9:35:25:
a1:97:aa:1d:42:d6:1c:a4:af:c0:88:17:a1:80:dd:
57:04:82:9e:c6:bf:c2:00:fe:1a:59:00:9a:2e:02:
b9:cd:d8:00:7e:c7:5c:c2:8d:bf:76:0e:55:af:b4:
af:83:02:c5:e3:3d:d9:e5:89:9b:d4:d1:e3:a8:48:
9a:85:80:02:45:05:3c:5a:c4:bd:32:e7:7a:7a:ba:
c5:5b:8a:fc:f4:62:aa:be:dd:6e:83:77:d1:43:c6:
06:d8:4f:c9:3b:26:58:d2:20:aa:55:15:37:7d:99:
a7:07:1a:70:c2:1c:cf:fa:90:75:f6:a6:6b:d8:a5:
a8:e9:7d:8c:2c:8d:98:40:60:8e:3a:f7:7e:21:76:
8e:26:39:77:8f:da:d6:ac:7b:75:12:95:61:0d:ab:
19:d6:b4:f9:10:74:f5:a7:dc:50:14:8f:20:17:f5:
03:1a:7f:2e:26:f7:4b:b0:55:a1:0b:61:7e:5c:d1:
d3:11:cb:53:c6:6a:09:95:46:6e:2f:ed:21:b1:bd:
c6:22:8a:58:6d:7c:07:d5:81:f5:4d:43:ed:70:da:
e9:18:4d:b4:c6:81:92:ae:ca:af:f7:53:90:9c:79:
28:b9:ff:db:01:c5:54:e7:97:4c:63:07:c7:55:73:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:4F:C6:CF:08:39:00:55:F0:29:7D:CD:BB:A6:B4:08:45:AA:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407fa8b9-7b75-341b-bc67-f284b5180c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2b:d7:59:99:80:c7:47:fe:25:a3:09:f1:f7:de:0a:df:15:
7f:a4:db:de:c5:15:72:e5:4f:57:09:39:10:f0:0f:67:09:ef:
cb:f2:87:d4:c2:0d:1e:80:d0:c2:b4:71:4a:ab:ce:19:11:53:
d6:40:2b:b0:d1:37:fc:ea:8e:b6:34:22:ba:e3:12:01:b5:fd:
20:29:83:b5:4e:90:17:0f:24:83:64:5c:d0:00:e6:34:f7:3f:
57:d7:35:f3:1a:7d:ee:02:14:2b:e6:6c:de:14:78:67:d0:29:
f2:7e:1e:db:73:92:f3:b5:2f:98:c6:95:4f:3f:cb:7e:b2:be:
8c:e8:ae:e5:bc:ba:6a:6a:6e:2b:71:0e:d8:d3:63:96:02:0c:
82:46:83:d1:7a:71:71:0f:a3:dd:a5:c6:26:e1:b0:7c:41:6a:
b7:78:f9:3f:85:4b:63:ee:70:01:89:99:d4:13:3a:33:c1:e8:
60:ba:c3:5c:45:38:92:36:9e:12:13:f1:37:42:ca:c2:2b:a2:
83:04:a6:31:b8:28:e8:dd:d6:2c:35:22:e9:fe:98:9b:07:85:
26:28:0f:d0:bb:5a:cc:a2:55:ba:1e:7b:fc:ab:7b:37:21:a1:
86:7c:4b:ae:e0:5d:23:bd:8f:79:28:45:37:08:ad:a2:4e:3f:
38:ae:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:33 2025 by rpki-client