Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e613a8b-385c-32f4-9637-0b4a53be6bbd.roa
File: 7e613a8b-385c-32f4-9637-0b4a53be6bbd.roa (raw, json)
Hash identifier: /mvrsg1IAbJFVfRKSjpwNORfqeqiGSpY+gx4ALCroBo=
Subject key identifier: F0:CF:B8:49:2C:60:BC:70:57:4A:FC:C0:B5:69:66:14:4F:2D:7C:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8116BE0ADCB573292AA0A3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e613a8b-385c-32f4-9637-0b4a53be6bbd.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:16:be:0a:dc:b5:73:29:2a:a0:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=4708374e-7e61-4cd4-b485-b26e71f108cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:6f:e9:d9:10:e2:38:b1:de:fb:b1:25:ad:
3e:e3:c3:8f:6f:b7:2c:6b:0a:fd:a8:d5:52:2b:19:
fd:c8:de:0f:03:d8:f7:c7:07:aa:08:2a:7c:da:3c:
9a:6b:70:b5:60:1e:83:59:4b:72:f7:38:bc:6d:9a:
f1:bc:e9:a2:4e:dd:3b:c0:91:f3:da:b0:cc:42:68:
4c:56:af:d4:04:99:d5:a1:d8:1d:87:cb:14:51:2f:
19:ce:ec:e8:41:45:a0:eb:bc:af:6a:74:6b:2c:6f:
92:e1:8c:71:a7:9e:ab:10:69:7e:11:d3:8b:d6:01:
73:39:b2:2e:a0:8a:90:8c:4d:28:59:dd:86:d0:39:
13:da:2e:4c:bf:0a:32:38:1e:70:31:c6:81:b7:22:
89:f0:ce:b0:6e:fc:58:73:fa:34:af:fc:a1:ac:04:
8e:80:d6:90:16:d3:87:d0:3d:87:71:82:52:d9:3d:
73:30:0b:f2:b6:63:ec:b4:75:ac:98:ce:b7:fa:87:
f4:cf:b1:19:7e:d5:77:0c:1c:b2:14:40:4c:b4:73:
b4:e3:ad:ad:7b:4f:f2:67:19:c4:32:48:98:b1:de:
51:d3:8a:f2:67:85:e5:3c:b7:8d:ef:70:4b:f1:62:
94:7a:6c:2f:16:43:00:14:5e:01:73:3f:a0:f3:63:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CF:B8:49:2C:60:BC:70:57:4A:FC:C0:B5:69:66:14:4F:2D:7C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e613a8b-385c-32f4-9637-0b4a53be6bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:76:1e:32:09:ff:ec:55:1e:4d:30:37:29:01:d6:8b:9a:87:
95:95:90:5c:7e:55:51:46:6b:1e:6f:13:5d:8e:62:66:66:c0:
67:8b:b9:a2:ae:df:e2:6b:ec:40:48:01:4f:a8:7e:e3:b2:d0:
a4:0a:2e:f9:26:8e:d6:54:70:a2:aa:59:fc:1d:0c:06:36:53:
71:bc:f2:24:63:50:b1:31:b4:45:12:0c:ef:a1:74:1f:a3:8f:
ca:9a:ff:77:e4:3d:4b:89:71:e2:25:12:4d:50:88:59:98:1d:
c3:2c:b6:b9:62:8a:65:1a:f7:62:18:64:0f:c1:29:f3:ab:9f:
11:91:5a:5b:9e:4a:51:46:a4:bc:5d:6a:64:0d:23:d7:ad:05:
c5:ad:91:bc:36:fd:42:33:f5:57:6e:13:d3:f4:f4:47:d6:46:
a0:81:2f:ec:3d:2f:8b:d1:5b:40:86:9c:22:79:8c:64:d8:f3:
61:48:ed:c5:d1:ef:da:80:ef:14:d5:b2:15:8f:5e:d8:4d:2e:
2e:09:fb:b9:aa:fb:82:c6:25:db:d5:48:09:e7:18:8f:4a:3d:
72:86:ea:6e:db:7a:d6:b8:d7:1a:21:33:a8:db:77:d9:b5:72:
80:d8:b1:9d:ce:c5:61:ea:4b:c7:b0:02:e7:eb:37:5e:4a:d3:
c3:9f:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:33:16 2025 by rpki-client