Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445ed64c-001e-3ab5-939f-7852acbcb66b.roa
File: 445ed64c-001e-3ab5-939f-7852acbcb66b.roa (raw, json)
Hash identifier: gS36X4ywiF7XhSRRAPgk4zNpRIlFNWff/arQbXD7oFo=
Subject key identifier: C9:7D:4C:88:25:56:67:46:A0:10:00:B9:0E:CB:0A:15:49:DB:13:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C965A230D82F63C38C05B7780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445ed64c-001e-3ab5-939f-7852acbcb66b.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:5a:23:0d:82:f6:3c:38:c0:5b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=e23c8ceb-697d-4ccf-8585-12be374ee0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:7d:b7:2e:b6:58:dc:07:21:b8:02:60:fb:
21:75:c0:87:12:66:e7:81:40:08:00:56:da:03:ae:
9c:d6:8b:ca:44:97:31:96:fe:1b:e0:ab:97:d8:0a:
fe:48:d9:d0:a5:e6:42:ac:a7:03:1c:7c:d9:f5:a7:
3b:aa:1b:8d:b5:97:23:a7:7e:0b:08:93:58:f5:11:
f1:8d:2f:f6:de:cc:66:c3:1c:47:23:e1:ef:34:83:
19:bb:cb:17:ea:fa:ea:82:f1:78:bb:67:83:14:f0:
40:15:f8:d7:d7:c0:30:30:65:10:01:a3:3b:68:12:
a9:92:01:14:e8:15:d9:2c:1a:7f:65:d4:65:a5:ab:
c2:b3:90:84:a3:67:12:6b:04:8c:ef:d5:ba:01:36:
6e:5a:47:b6:b5:b1:e1:c5:be:90:cc:21:e9:cb:4d:
54:46:31:73:4c:1e:9e:e7:9f:4e:0b:83:c7:7d:7f:
28:a2:f3:0b:c4:44:66:70:3f:11:20:2b:37:a8:cb:
a3:dc:01:41:f2:16:14:65:17:10:00:46:25:3e:ab:
21:8b:cf:47:73:b6:7c:eb:65:5d:3d:a7:d7:f6:d2:
14:86:25:fe:ab:f4:b8:32:56:77:29:82:ab:4a:f3:
3a:cd:a5:f4:13:0c:68:24:bf:13:c5:3d:2a:4b:9f:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:4C:88:25:56:67:46:A0:10:00:B9:0E:CB:0A:15:49:DB:13:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445ed64c-001e-3ab5-939f-7852acbcb66b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:eb:06:46:6f:f7:3c:6a:8e:33:f9:7f:92:f2:ac:7a:0f:15:
0e:3d:d1:4a:67:cd:e5:ea:cd:84:3a:1e:2d:55:60:fb:6e:5b:
cc:34:b0:90:1f:9b:b7:06:36:f5:f9:44:15:56:77:e3:11:75:
83:f9:c8:ae:59:4f:22:e3:0c:af:74:39:66:e6:d5:5b:f4:c9:
3f:30:0a:4c:47:6e:ac:91:b4:44:ee:37:c5:b3:f9:39:e0:46:
15:99:cd:7b:1c:50:d7:b9:ba:ba:24:5f:d7:48:5c:82:85:c3:
c6:48:3b:62:f3:91:ec:e9:04:fa:07:80:98:d4:53:d9:cb:a4:
51:bd:3d:27:96:79:c8:a1:2a:a2:fc:5f:02:7a:19:ba:33:ed:
ca:73:54:6d:07:65:41:38:c4:19:32:48:22:2f:62:c5:38:09:
92:63:bb:95:14:22:3c:d6:2e:cc:cb:61:b6:65:56:d5:05:58:
f7:76:0d:98:dc:98:0a:48:4b:70:24:76:e5:12:4a:14:40:ff:
e1:6d:49:b3:35:75:c5:58:20:13:cf:e7:59:ac:51:16:da:84:
5f:3e:0b:77:d1:66:d9:01:bd:76:a2:8d:a0:43:2b:90:2d:33:
dd:95:35:de:9f:06:9b:71:df:8f:8c:6b:46:1c:1d:ec:02:22:
ed:28:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:45 2025 by rpki-client