Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/540bdfa0-c259-3747-b9e9-6cf9fed9a880.roa
File: 540bdfa0-c259-3747-b9e9-6cf9fed9a880.roa (raw, json)
Hash identifier: nbOnGHC0Zh+n0dli1b4OMUMm93NUzknsxRZwDGcXlvY=
Subject key identifier: 15:35:04:6C:1D:72:23:9D:44:1C:06:A1:4F:D2:EA:A0:C5:2E:BD:C3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0838A5398A5CA807B56CFE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/540bdfa0-c259-3747-b9e9-6cf9fed9a880.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:38:a5:39:8a:5c:a8:07:b5:6c:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=8fc32eee-8586-432d-b747-61f33abb030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:13:79:7d:a1:4f:cb:d6:53:d2:48:1a:60:
49:cd:67:74:af:28:7e:cd:dc:fb:8b:c9:87:a5:61:
6b:4b:99:79:d5:cf:56:48:a5:84:b9:c8:0e:06:93:
a4:53:2b:a2:c3:e7:bc:e3:f9:5a:38:2c:10:c1:1a:
0b:7c:8b:88:33:52:73:6f:fd:de:82:b2:a6:84:fa:
f0:0a:96:d9:5a:19:47:3a:52:20:4f:9e:0b:64:cd:
55:1b:14:e1:e2:5e:f1:57:f9:52:75:a2:ba:be:85:
48:61:e3:ad:a1:7b:df:62:a2:c8:85:b4:6e:93:72:
36:9f:f8:c7:0d:f3:98:fa:c8:b1:79:95:38:35:3c:
be:2d:76:ec:3f:b0:b9:88:70:79:18:8f:24:32:07:
37:e5:0b:fa:51:56:f5:6f:4d:93:a7:b0:b7:0e:15:
c5:1d:e1:4c:c2:31:6e:8a:f2:1d:cf:b7:28:fe:07:
8c:d6:fe:0a:29:22:b4:4f:8d:bc:8d:f3:0a:c1:ea:
92:65:d9:cc:de:f4:87:4c:53:67:e2:5e:4f:30:4d:
db:2a:a9:47:6a:1f:e7:f2:71:77:b5:5b:80:12:43:
0c:f1:bf:ae:4d:0d:c7:b2:da:72:75:a6:d7:9f:90:
97:cc:e1:3c:e9:21:5b:1f:3f:3b:81:a0:93:09:b9:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:04:6C:1D:72:23:9D:44:1C:06:A1:4F:D2:EA:A0:C5:2E:BD:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/540bdfa0-c259-3747-b9e9-6cf9fed9a880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:65:01:27:5c:69:b1:fc:0d:84:0e:fe:f7:21:43:b3:3c:93:
f1:88:1f:d5:7c:00:53:29:12:7a:1a:6c:94:c8:fb:d8:0d:9d:
d8:f6:c7:8f:a2:c4:25:a1:f1:41:c7:3e:38:e0:7a:54:07:70:
03:55:b5:ce:5c:2a:d3:ce:16:3f:12:cd:91:f3:80:ed:07:c1:
b5:c3:d5:de:2f:f4:3c:c0:1f:a1:4d:0e:44:c5:96:17:8c:6b:
db:c5:d5:ef:51:b2:6a:00:28:d8:bd:43:a2:4c:82:61:ed:69:
51:9c:0f:dc:02:7c:c6:7f:29:1a:71:65:38:04:89:92:36:af:
aa:dc:90:a1:25:5e:72:be:5f:5a:33:ad:ad:4a:2f:41:38:55:
82:7f:b3:5f:26:fe:2d:e3:b0:07:21:f6:cf:b7:9d:ca:31:8a:
b5:17:81:70:f4:3b:a5:09:48:1f:4a:77:fa:bc:11:f5:47:71:
e8:0d:8a:30:0f:db:d5:23:0f:e7:90:62:c7:de:7b:08:66:47:
60:fd:0d:31:24:ae:ac:bf:50:24:00:58:e0:92:ad:ca:ff:58:
f9:75:00:01:6c:51:6a:e3:72:60:18:65:17:0e:f0:7f:e2:f7:
f7:f1:77:eb:42:63:b4:68:59:1d:4e:3e:77:c8:61:d9:54:b0:
73:17:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:35:17 2025 by rpki-client