Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4372327e-e20a-32f7-9960-c021be302c21.roa
File: 4372327e-e20a-32f7-9960-c021be302c21.roa (raw, json)
Hash identifier: CX3hvYSsgAFWwxdhqGhuyNwuA3j5SjEuRPulR5WGTVA=
Subject key identifier: E6:DA:29:53:88:79:C0:FE:82:98:E5:5F:BF:57:06:28:7B:37:AF:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA6DAEA4E3D024144BEE493B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4372327e-e20a-32f7-9960-c021be302c21.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a6:da:ea:4e:3d:02:41:44:be:e4:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=39543060-2efe-4a29-b0bc-c3c89aa6a9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:0e:a3:46:58:c2:d8:90:00:b7:d2:a2:54:
3d:7c:3b:c2:19:ac:7e:95:26:b2:e5:00:09:9e:48:
20:93:7b:61:5e:9c:af:7b:13:4b:1d:18:b7:60:83:
de:9a:1e:c4:1d:09:9b:ba:31:67:01:d9:2c:eb:3f:
74:7b:da:b6:2a:5b:c2:c0:0a:2c:b7:1b:f0:bc:b4:
e0:ed:97:67:7f:8e:76:2b:7d:58:ad:05:cb:ec:20:
2b:6a:f3:a4:53:3b:7c:5a:44:7f:83:7b:ea:1b:de:
f6:2c:07:5e:8c:94:80:da:b0:ac:d5:45:58:90:cf:
a3:38:9d:29:9f:01:09:73:e7:a7:63:4d:e8:59:2e:
af:e4:95:7f:d6:b1:dc:f2:d5:fa:36:48:90:fa:63:
2b:f1:82:33:87:9b:be:63:74:d4:d3:d7:0e:3b:3c:
7d:fe:ff:f6:28:25:13:85:51:3b:7e:09:66:0f:48:
5c:92:74:75:89:76:f6:a4:a1:b0:b1:52:f2:4c:df:
78:fe:92:fd:84:8d:48:7d:fa:65:21:bc:43:44:d2:
f6:3a:a5:6f:6f:9e:94:c3:4f:fc:cd:1c:f0:5b:be:
ff:44:37:02:f1:e4:3f:a2:6e:94:52:d0:29:14:13:
2b:ca:d3:c9:89:c4:f3:41:dc:bd:03:9c:5d:aa:ee:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:29:53:88:79:C0:FE:82:98:E5:5F:BF:57:06:28:7B:37:AF:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4372327e-e20a-32f7-9960-c021be302c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:01:dc:b8:5f:61:d6:bf:da:1b:f9:64:d1:a3:5e:3a:bb:7b:
63:5e:ae:a6:98:f1:6b:fb:08:cb:07:07:81:67:72:bf:dc:90:
e9:e4:20:d9:3a:c7:cd:21:ed:31:3d:28:03:3e:1a:ec:86:ca:
e1:8d:66:8a:fb:5f:30:2a:7a:61:5f:35:25:c4:f5:0a:54:14:
f3:80:34:77:8a:0a:00:3e:b8:2f:86:1a:8c:ee:b8:85:ee:a9:
d8:85:86:ac:1b:b8:0f:37:b6:ec:79:1c:62:48:29:6d:df:15:
83:82:10:ac:64:4c:3b:11:95:8c:b4:a2:9e:68:c5:60:10:e1:
28:8f:ba:21:1e:a7:51:4e:c3:c4:a1:21:ee:86:94:60:e9:be:
c0:34:67:b4:7d:c9:00:7a:e0:d4:84:12:8c:64:64:70:82:37:
28:31:4e:df:f6:19:23:b4:e1:8f:6d:80:7e:b5:25:28:8b:ef:
13:5a:e0:a1:de:e5:f3:bb:cd:a6:5e:f0:7a:91:4b:fc:9f:dd:
ff:a8:5b:dc:be:bd:26:70:e8:3b:b0:9f:ea:a5:19:da:8c:70:
21:81:78:30:d2:c8:46:d3:62:e8:a4:76:cd:79:da:f6:cd:5a:
ee:ab:1c:89:58:c1:be:6a:4b:d6:32:e8:25:47:53:1d:0d:99:
da:89:73:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+m2upOPQJBRL7kk7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMTEyMDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
Mzk1NDMwNjAtMmVmZS00YTI5LWIwYmMtYzNjODlhYTZhOWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUOo0ZYwtiQALfSolQ9fDvCGax+lSay5QAJ
nkggk3thXpyvexNLHRi3YIPemh7EHQmbujFnAdks6z90e9q2KlvCwAostxvwvLTg
7Zdnf452K31YrQXL7CAravOkUzt8WkR/g3vqG972LAdejJSA2rCs1UVYkM+jOJ0p
nwEJc+enY03oWS6v5JV/1rHc8tX6NkiQ+mMr8YIzh5u+Y3TU09cOOzx9/v/2KCUT
hVE7fglmD0hcknR1iXb2pKGwsVLyTN94/pL9hI1IffplIbxDRNL2OqVvb56Uw0/8
zRzwW77/RDcC8eQ/om6UUtApFBMrytPJicTzQdy9A5xdqu5zIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFObaKVOIecD+gpjlX79XBih7N6/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDM3MjMyN2UtZTIwYS0z
MmY3LTk5NjAtYzAyMWJlMzAyYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCNFQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALwHcuF9h1r/aG/lk0aNeOrt7Y16uppjxa/sIywcHgWdyv9yQ6eQg2TrH
zSHtMT0oAz4a7IbK4Y1mivtfMCp6YV81JcT1ClQU84A0d4oKAD64L4YajO64he6p
2IWGrBu4Dze27HkcYkgpbd8Vg4IQrGRMOxGVjLSinmjFYBDhKI+6IR6nUU7DxKEh
7oaUYOm+wDRntH3JAHrg1IQSjGRkcII3KDFO3/YZI7Thj22AfrUlKIvvE1rgod7l
87vNpl7wepFL/J/d/6hb3L69JnDoO7Cf6qUZ2oxwIYF4MNLIRtNi6KR2zXna9s1a
7qsciVjBvmpL1jLoJUdTHQ2Z2olz+g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:59 2025 by rpki-client