Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b3b27b5-e934-3066-b157-0fbd44065474.roa
File: 5b3b27b5-e934-3066-b157-0fbd44065474.roa (raw, json)
Hash identifier: 0LblXKLM3Ujpvg6uKAyYGeTZyvBM0xZb5Ug8qKrT8SQ=
Subject key identifier: 73:92:18:2F:4E:D1:D3:40:D2:7F:4B:E0:62:55:50:A6:50:FE:88:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCF385D7B73E06727518FACC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b3b27b5-e934-3066-b157-0fbd44065474.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:38:5d:7b:73:e0:67:27:51:8f:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=3068b3c0-9855-4525-86d0-805e90ecb525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:e2:a2:d7:fd:4c:11:17:2d:da:f7:b3:6c:
39:b7:7b:58:41:2e:83:86:5c:9c:8f:cb:b3:26:e2:
9a:3e:e0:7d:28:53:e3:c1:56:8d:19:56:c0:08:92:
7f:a7:52:eb:f9:02:95:3a:29:48:86:06:14:46:75:
a9:9e:fe:45:0e:45:35:99:19:3b:1d:c1:a4:5e:b7:
c0:05:92:bd:21:7e:1d:32:bf:3e:cc:62:f9:7e:1e:
a0:d9:ea:a6:94:1e:ce:f5:c5:49:71:72:64:46:e1:
dd:f2:11:1b:41:c3:5b:90:61:72:aa:c5:59:ff:e0:
3e:36:f8:48:9b:36:00:a7:90:03:66:07:7c:b7:e9:
c0:7b:cd:7b:07:79:f9:a6:53:88:53:33:ae:da:bc:
89:c8:13:5e:84:dc:d7:af:fd:a3:f2:39:3a:22:bb:
98:2f:20:f0:e2:9a:38:58:76:98:67:8c:47:97:d8:
c4:54:37:2b:cb:68:3e:6f:16:4d:9d:cc:5b:3b:91:
fd:8a:de:37:46:47:1a:11:67:c0:d7:f8:7c:02:26:
c2:49:e2:a3:ab:8a:84:5d:f1:57:54:5e:0c:e4:40:
36:29:79:1d:47:61:d4:6f:ca:53:94:51:8c:ea:45:
fd:e5:7d:48:3f:30:91:25:71:2e:17:70:f3:2f:9b:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:18:2F:4E:D1:D3:40:D2:7F:4B:E0:62:55:50:A6:50:FE:88:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b3b27b5-e934-3066-b157-0fbd44065474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:7c:f6:dd:16:bf:6d:ff:78:1f:c2:b5:2f:71:08:73:dd:8c:
30:0c:72:b8:ce:88:83:2d:5d:03:ef:fa:74:41:8b:03:f1:99:
51:6a:29:0d:de:b0:6d:1c:b6:8e:1f:3b:03:8c:9e:3b:8c:ee:
35:cb:d2:c0:f7:44:38:2a:df:28:81:0e:cf:1b:62:9c:5f:ba:
70:cc:51:0e:2a:45:6a:df:5a:bb:bb:13:9a:c9:8c:e4:a9:85:
d5:d6:58:b3:e7:83:83:3d:cb:bd:90:5e:c7:6a:2a:63:98:bd:
bc:d7:20:87:b8:02:26:92:c5:a6:12:0e:1c:fc:f3:0b:f5:a4:
3e:ec:ad:65:08:3a:7e:a2:5b:95:5d:e7:01:f4:9f:47:8d:d6:
f8:1e:c7:b8:06:10:34:54:1f:8b:1f:93:73:d4:74:b0:b6:89:
40:01:6f:31:d9:ab:96:2b:25:fb:2f:ff:ad:bb:e5:db:85:34:
2d:64:1b:49:26:11:e4:dd:23:38:f7:52:6c:bb:05:75:07:d5:
5c:d9:ae:8b:d9:a9:49:26:c4:02:72:b3:3f:2d:87:bb:a6:f3:
32:b1:f6:ed:12:34:02:19:70:f7:52:28:ca:f4:98:fb:c9:94:
32:7f:18:c9:36:9f:01:9f:57:3c:54:55:9c:4c:fe:db:6d:da:
bd:2d:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:11 2025 by rpki-client