Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ca2b63f-d669-3f24-a95d-a4e4eef2491b.roa
File: 5ca2b63f-d669-3f24-a95d-a4e4eef2491b.roa (raw, json)
Hash identifier: sGVmMJ1+SZoG6gvKw/uwQGOSjS8st/0910ckx7hZBvE=
Subject key identifier: FD:93:D2:26:E6:E1:2E:42:D8:E6:70:97:6A:4A:4D:56:69:57:D9:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59FA3D5421C21A7B15422B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ca2b63f-d669-3f24-a95d-a4e4eef2491b.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:fa:3d:54:21:c2:1a:7b:15:42:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=48bc8259-e70c-4333-97ff-533688eb5a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:a1:53:69:cb:21:5b:13:7e:67:66:ec:4d:
0c:be:f3:43:99:bb:e4:75:11:4f:b3:06:90:21:7e:
88:a3:55:ca:d8:0e:26:40:ab:81:15:d2:70:d6:d1:
8d:a4:1b:c8:41:ff:25:c3:79:c6:d0:1d:f4:b2:79:
f3:aa:c2:3f:34:eb:f9:f6:5d:e9:af:26:95:5f:9d:
4a:a9:45:8e:60:8c:83:38:9d:22:48:99:bf:02:4f:
82:75:f9:6b:b1:6e:b8:11:a1:b4:e5:79:90:bc:99:
78:94:ca:be:d9:a3:7b:83:6a:24:36:10:e0:8d:31:
36:58:36:99:73:9b:59:c3:d6:2d:4e:81:26:6c:f8:
27:3b:b0:5e:a4:43:8c:99:a2:02:25:e6:9b:1e:33:
e6:8f:4f:f2:88:ea:ae:0b:7e:2f:be:ca:a7:6f:9c:
dd:ee:76:3d:e4:2f:ef:8f:73:46:e1:1f:20:b5:93:
f5:ec:7a:ac:45:97:a1:66:30:a7:8c:c2:28:11:6e:
a1:74:d6:85:68:5b:c9:c9:5c:7c:ae:5e:4a:2a:50:
a3:00:71:16:fc:0c:15:19:b0:88:9a:4e:5d:44:b3:
c9:51:cc:48:82:0b:83:a4:3c:76:44:ce:21:f6:e2:
3e:e6:d6:bc:5a:a9:fe:1e:92:a9:34:0a:9f:ef:90:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:D2:26:E6:E1:2E:42:D8:E6:70:97:6A:4A:4D:56:69:57:D9:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ca2b63f-d669-3f24-a95d-a4e4eef2491b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f4:a0:3b:ea:26:e6:74:33:28:74:a2:60:ec:b1:50:7a:ee:
ab:ec:50:ba:36:a8:76:39:37:79:52:8d:06:3e:03:75:c9:3d:
c4:f7:30:71:a4:c4:ef:94:5a:3e:14:c5:e1:dc:c2:0f:72:59:
06:7d:e5:67:f1:58:da:6b:dd:83:ba:d5:67:17:60:84:29:84:
f1:e5:b0:32:64:d1:c4:7b:9b:2f:0a:74:78:1c:99:07:36:6b:
10:79:69:e0:5a:9c:11:c4:cd:1b:43:82:71:c2:54:3d:ec:1a:
06:16:db:10:44:f0:85:ca:08:7f:f7:77:d5:2a:96:9d:04:e6:
84:f3:6d:0b:1c:e4:bf:76:0a:e1:fb:f4:78:95:21:2c:0e:81:
d2:b2:b1:bb:89:8a:48:92:7b:39:b3:d1:ed:db:ce:6d:6c:a6:
a1:ae:3a:20:74:b6:a8:20:ae:35:fb:ed:33:74:2d:3e:50:fc:
7d:ad:30:a2:86:53:ba:ad:5b:43:a9:b0:df:b8:4a:50:35:2d:
c8:28:7d:e5:55:a5:4e:6d:8b:c5:f6:49:cb:15:29:15:af:9a:
4f:f4:65:51:49:95:73:3b:61:19:37:a6:da:76:cb:3f:0a:4b:
7a:13:c5:75:04:45:19:a3:3e:c9:6f:60:1d:53:e9:c3:92:61:
1f:6c:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:32:58 2025 by rpki-client