Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60976874-1d19-39f3-b9a8-3da14778da2e.roa
File: 60976874-1d19-39f3-b9a8-3da14778da2e.roa (raw, json)
Hash identifier: OblXTf28vKatIme93qWnBb5ehjBViAX3urZXAuZP6EY=
Subject key identifier: A7:EC:68:E8:73:69:7D:08:68:50:3B:2A:C9:F2:75:73:60:68:8A:39
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE43F8E09AFF3473D7CB02D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60976874-1d19-39f3-b9a8-3da14778da2e.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:3f:8e:09:af:f3:47:3d:7c:b0:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=6e41a2ee-fc5f-4337-972f-46481fba430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:3b:9f:76:03:bb:35:b6:c3:e4:4f:10:1b:
e2:3f:44:5f:22:a3:e1:e5:bf:bc:cb:bf:22:0e:e2:
b0:32:78:8e:83:20:13:c8:be:65:67:7d:4c:70:16:
b0:8d:1f:81:96:76:f8:a8:40:ab:c6:1d:e9:3f:79:
4c:fe:3f:21:ae:bd:e7:65:5c:f0:d3:64:1c:08:37:
0a:b2:4f:20:2a:b5:4b:6d:e1:14:d2:81:68:ae:b9:
4b:48:55:4f:50:d5:4f:27:e2:65:0c:72:66:d9:47:
a8:9a:7c:9a:47:3d:98:bc:b6:33:ef:fc:90:5f:00:
64:0d:47:b2:f9:e1:7e:6e:e4:f1:cf:1f:6f:c5:1e:
be:f9:2f:ed:d0:37:8d:dc:c8:7f:ea:47:f3:6c:10:
df:a1:2a:df:e4:43:87:37:f7:e8:2a:63:af:43:0d:
ab:f0:63:b8:b4:c1:e6:9b:9e:b0:cb:5b:7c:62:ef:
58:9f:af:99:bd:9c:bd:fa:00:f0:72:5f:b0:c8:e5:
86:85:e9:f7:82:00:bc:c0:3d:31:d9:23:4b:65:52:
7b:d1:2b:aa:02:bb:43:be:9d:31:f5:bc:5d:86:bc:
1b:53:7d:c4:60:17:3c:e7:2e:6f:21:ba:26:94:79:
af:49:ce:1e:77:4d:cd:56:e7:3a:39:dc:37:e8:04:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:68:E8:73:69:7D:08:68:50:3B:2A:C9:F2:75:73:60:68:8A:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60976874-1d19-39f3-b9a8-3da14778da2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:4a:7a:bd:ee:88:1e:74:8b:12:c3:e4:b9:73:ee:38:2e:13:
52:74:90:4e:df:bf:70:08:55:60:2f:57:e6:4b:3c:e5:f5:70:
32:28:c0:2f:c0:68:68:8b:db:de:91:46:b9:96:39:f1:52:b5:
b5:a0:34:a8:39:a5:b8:f5:8c:ee:30:6e:e2:96:f6:35:bb:ea:
db:46:8e:85:5b:5c:5f:36:19:bd:c3:88:c0:ca:67:83:28:07:
7f:2f:e5:32:25:25:27:16:3d:20:b2:c5:73:e5:09:55:ea:62:
95:4e:84:79:08:a7:5a:39:9a:a0:83:38:7c:d4:2b:42:22:9a:
ca:19:d6:b2:53:99:0d:09:fa:73:ce:54:bc:ad:96:cb:53:37:
ea:24:36:4f:8b:e5:ea:94:21:b6:9c:bb:aa:8b:a8:17:33:7b:
4c:ee:97:26:b3:db:70:57:12:5d:ee:a1:dd:d8:61:4a:e5:9e:
59:b1:71:e5:80:3b:4a:2f:d8:cb:52:06:3f:73:19:dc:0a:a6:
d8:3e:76:1a:2d:aa:58:ff:28:6d:ac:d8:67:d6:43:0d:39:e3:
2b:e2:2c:25:4c:02:01:a9:d0:a5:b5:c7:93:ea:0d:19:47:77:
be:2a:c4:4c:ca:20:ea:55:9c:b0:90:56:4e:ff:95:d1:f7:76:
df:8f:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:14 2025 by rpki-client