Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fb8f24c-ecde-37fc-b658-452368412517.roa
File: 5fb8f24c-ecde-37fc-b658-452368412517.roa (raw, json)
Hash identifier: qA1jYL2c+HzVTiaLLDY8YtmNCBBkf+Xd1rY7Ez8BJik=
Subject key identifier: 62:9F:C4:34:DF:82:6C:1D:D2:CC:81:48:EE:A5:1F:1A:B9:28:BE:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2F55981A0D88840E716D1B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fb8f24c-ecde-37fc-b658-452368412517.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:55:98:1a:0d:88:84:0e:71:6d:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=5a0f632b-6aeb-4e37-8803-ad7b0d71516f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:5a:57:ac:67:6a:01:3c:51:0c:57:83:06:
61:c4:a1:3a:ff:bf:7f:76:cc:42:4d:2c:5b:5a:c1:
21:19:3f:31:d3:44:8d:b9:ad:87:c9:d7:c3:1a:f9:
f5:ee:9c:a5:6e:ad:af:f0:ce:28:b9:b2:4c:6b:59:
f0:36:0f:02:bb:21:ca:67:b7:47:1b:a0:bd:59:5a:
46:a7:55:7d:63:5f:7a:63:2e:96:9e:45:af:d1:11:
c6:4b:39:63:1e:5b:c6:b5:aa:f3:c3:02:5f:bc:e2:
e6:49:3f:af:d5:b5:a8:6d:81:01:a0:8b:db:66:17:
21:ba:36:b4:ec:59:a5:12:3f:96:cc:cc:6a:78:41:
08:2c:9f:bd:0c:a6:7a:f7:79:ec:d3:5f:2c:6b:73:
21:e2:cf:c6:59:e2:01:e7:43:06:ed:a0:1b:2b:fd:
35:a0:95:a2:82:b4:78:d7:35:02:cf:3f:67:6b:d9:
33:95:99:92:8f:2f:f2:8e:0f:b4:23:3c:c5:18:2b:
7e:de:81:bb:15:87:fa:d0:67:89:e9:e1:f4:2f:5b:
3d:69:5c:e0:ae:05:ad:60:eb:e7:22:17:b8:6e:2f:
4b:cd:1a:2c:32:c6:9a:3f:f9:43:73:21:ba:e1:bd:
90:a2:4e:4a:2b:d6:be:3d:65:93:16:85:35:ef:42:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:C4:34:DF:82:6C:1D:D2:CC:81:48:EE:A5:1F:1A:B9:28:BE:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fb8f24c-ecde-37fc-b658-452368412517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a6:13:b0:a0:fd:06:5a:b2:07:30:e2:3d:4a:12:98:20:80:
a2:c4:e8:ce:11:c4:f2:49:99:20:97:ce:19:9b:6a:33:75:bc:
8c:ae:68:c4:9a:43:68:d4:fc:f5:cb:2f:92:b9:b6:2c:58:a5:
1f:4f:15:d3:d1:d9:0f:09:b0:a6:cd:11:d7:43:aa:99:a8:b6:
34:bf:ef:49:2b:a8:5a:f7:5f:1c:c7:89:6e:a5:97:9c:bd:b3:
6e:64:65:30:e8:38:f4:99:05:b7:7c:1d:04:fa:e8:f2:f9:2f:
e5:95:4c:56:60:9d:41:85:26:e8:24:b1:5b:7b:ad:d6:fd:f5:
f0:df:1a:d7:f0:d2:c1:ba:2d:9e:27:97:f6:64:13:fd:c7:18:
a1:a0:1e:68:31:4b:d3:d1:99:9f:93:ee:3c:c0:3a:ba:7f:a8:
49:40:d7:39:9b:86:52:39:e2:c7:88:20:8c:25:1b:54:1f:4a:
42:40:03:3f:25:4a:05:19:d0:07:54:8c:2a:76:12:f3:34:7d:
85:a0:e4:72:d2:e3:6e:78:2e:c7:c7:11:a6:e1:d2:a5:82:80:
f5:54:ae:a2:69:51:54:4d:02:55:60:b5:4a:f4:a2:70:e0:04:
1a:0f:a2:81:06:0a:1d:72:ce:fb:37:e7:2e:76:4c:22:9b:75:
e1:ac:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:37 2025 by rpki-client