Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75386ba9-925e-3c2e-a869-b659758ec806.roa
File: 75386ba9-925e-3c2e-a869-b659758ec806.roa (raw, json)
Hash identifier: h/q57ROVOq5/GbxS8JM8kKw2i2z00plAw3jJ6pEwzfc=
Subject key identifier: C0:40:B9:57:89:EB:D2:94:9C:49:CE:5B:1B:4F:1F:E9:AC:78:46:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408EBE56113B1B9B6FAA7C75A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75386ba9-925e-3c2e-a869-b659758ec806.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:be:56:11:3b:1b:9b:6f:aa:7c:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=ac8e1e77-9bcb-4be7-8cc3-7499fe2358b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:17:98:45:fd:f7:08:05:fd:47:3b:0b:03:
6a:a8:60:28:b8:f3:4c:44:bb:07:15:10:c3:ba:e8:
82:5b:1e:08:ba:c8:9f:07:6f:f5:c4:5b:df:ee:11:
06:b6:66:fc:d9:28:03:32:e5:51:e6:65:12:34:04:
38:e9:17:00:b7:4f:1d:fe:f4:bc:b9:4f:26:5d:2b:
cd:78:92:f2:65:fc:6f:27:c4:2e:e6:9a:ed:fe:c0:
d3:e1:9c:b4:77:ee:37:da:15:cd:58:ba:65:16:d3:
fa:10:54:66:ad:1d:00:ad:a7:ce:e7:37:c7:26:7f:
dc:b3:85:b2:6d:ac:e5:9c:e7:5e:fb:f5:7a:5c:c1:
24:5f:ab:66:84:66:70:db:fd:87:0a:0b:32:8f:e7:
3f:c6:82:c1:91:6d:a7:aa:4f:da:c4:f8:88:4d:bc:
fa:90:d7:28:a3:b3:9c:8c:d7:0e:ca:50:4a:6f:c8:
1b:e4:c8:5e:37:73:02:74:86:9a:ab:5d:84:63:53:
a5:35:9e:47:56:f6:01:38:19:56:1a:08:f7:41:8c:
d1:08:c9:04:a3:5d:97:54:28:c7:12:76:b3:bf:79:
c8:3a:9c:db:e8:d0:eb:2e:d6:b6:19:34:fb:85:4a:
25:26:b0:d1:30:8b:8b:9c:59:e3:ac:cf:ab:83:b2:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:B9:57:89:EB:D2:94:9C:49:CE:5B:1B:4F:1F:E9:AC:78:46:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75386ba9-925e-3c2e-a869-b659758ec806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:0f:2a:12:70:e5:d5:70:c3:94:32:e5:11:40:0c:fe:5a:d1:
34:b2:9c:ca:e0:fb:48:a6:c1:20:c9:bb:e7:9c:e7:d3:a0:20:
5f:a4:8d:24:fe:17:d5:86:20:42:22:12:3a:0b:c5:75:91:bb:
72:aa:2c:ac:3d:30:1e:fa:7f:9a:5c:1a:c3:7d:62:2e:44:f8:
d3:c0:74:8d:96:dd:ca:3c:a1:74:83:c5:2c:6e:ef:b2:b3:bb:
bc:df:6c:92:29:bf:7a:5d:df:f5:7d:8f:3e:65:07:5e:30:7e:
bc:32:5e:79:16:fc:b2:3b:f1:de:93:81:01:44:b7:c4:ed:18:
1c:84:6a:eb:08:87:fa:a7:99:f9:f7:3e:cd:81:99:a9:2a:4f:
8a:eb:e9:6f:f0:c6:de:e9:cb:36:59:9c:e4:9f:3c:11:a3:c8:
81:3a:bf:93:f8:1a:ed:b1:a6:f0:c5:b0:d4:7d:62:46:e8:10:
b9:34:2b:3a:27:4c:ed:d0:23:28:a7:53:a4:eb:81:d3:7a:38:
1b:ed:ac:e3:9a:5b:33:87:4a:b5:eb:30:bc:0d:2f:e4:ce:d2:
69:c2:0e:4b:f7:23:fd:07:f3:94:20:ce:ea:b3:7d:14:d4:36:
7b:14:55:22:1f:07:54:c7:4a:34:57:36:03:04:6d:b1:81:fd:
a8:98:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:47 2025 by rpki-client