Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/817d0551-e636-3ba0-9e5f-a9f8238ed8b6.roa
File: 817d0551-e636-3ba0-9e5f-a9f8238ed8b6.roa (raw, json)
Hash identifier: OzawUgpqjHipuLrztgLziUgiI4ibm+GIYyOC4by1c5s=
Subject key identifier: 52:B2:97:30:63:0A:19:24:00:5D:1A:2C:ED:AC:B3:B1:DD:1F:BD:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F082991E62DABA641C3DA91C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/817d0551-e636-3ba0-9e5f-a9f8238ed8b6.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:29:91:e6:2d:ab:a6:41:c3:da:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=7dbbdee9-2eb4-4fb4-96ac-43beb54d468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:51:28:c0:99:d8:f1:e5:b1:1d:54:00:fd:
94:30:e8:81:45:b9:d7:cc:32:ea:49:b7:36:29:9f:
89:e9:d3:80:51:03:79:dc:43:8a:b5:23:6e:15:0e:
a2:0b:79:42:94:38:2b:93:95:51:29:d2:be:e2:8d:
4b:91:a8:36:8f:89:44:f9:57:22:1c:2f:7e:05:c8:
d2:b2:d5:29:75:8c:72:e4:5c:5c:98:55:80:0d:35:
e5:ff:3a:88:d7:74:af:f8:e7:26:60:de:67:b1:af:
21:26:3f:b7:9d:ea:1d:9e:1c:b2:2d:bd:2b:e3:60:
8c:23:e8:af:eb:21:07:50:03:1b:14:58:06:29:77:
47:c3:f8:14:e7:b9:f8:15:78:a6:ca:97:47:d1:63:
3f:02:55:f9:43:b6:d1:91:39:c1:2f:7c:31:50:fe:
e0:ab:a1:6f:5b:89:0d:ff:43:32:61:ff:7f:08:6f:
eb:29:b6:72:30:67:7f:69:db:b2:41:e0:8b:bb:c8:
bd:13:e2:90:55:63:68:22:da:db:98:64:8f:6d:d7:
08:9f:c3:e6:ed:aa:f9:03:36:0f:35:16:53:12:29:
45:2f:b0:0c:fb:6d:a2:be:f2:1f:bd:a0:c1:15:ba:
23:34:2a:90:1d:34:81:a8:c3:a9:5b:7c:a1:83:70:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:97:30:63:0A:19:24:00:5D:1A:2C:ED:AC:B3:B1:DD:1F:BD:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/817d0551-e636-3ba0-9e5f-a9f8238ed8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:aa:68:f3:7c:a7:38:b2:ea:b9:c2:42:65:8e:96:8e:a6:7e:
e9:e0:10:b8:b0:d4:43:7c:12:f0:7f:04:3a:a5:d2:52:c3:9b:
e6:0e:a3:7a:1b:73:db:a8:c0:6d:56:ac:cf:ae:cf:36:ca:47:
56:b9:c7:24:6a:15:b2:29:be:f1:70:71:8f:52:f8:a2:be:0d:
9c:82:1f:db:c5:d0:9c:ee:3f:17:7e:86:94:d8:3e:50:83:63:
0f:7e:01:50:18:43:8f:c4:d8:d1:c5:05:45:72:75:78:16:9f:
dc:23:eb:e0:33:8c:eb:b4:a2:ce:13:a8:73:67:a5:a0:cb:82:
a1:ed:f9:5c:b2:b3:78:c2:3d:d8:fe:2c:05:ee:8d:da:72:1b:
a0:25:7d:dc:f8:f7:a6:1a:c6:71:22:17:b7:59:da:2d:66:1a:
c3:ff:dc:a1:c0:09:9d:8c:1d:ff:0b:b1:ed:a4:22:b9:8e:10:
d6:d4:bb:c0:14:1e:54:56:57:f8:6d:d4:20:a1:fc:61:3b:f9:
f2:c5:06:a4:bb:b1:1e:ed:4e:60:85:72:ba:91:be:95:14:19:
9d:97:09:df:83:cd:45:f4:6b:26:18:b5:2e:70:7f:ee:35:73:
5f:e5:f8:c5:00:f3:eb:9f:90:45:86:fb:44:89:1f:be:aa:2f:
d4:92:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:41 2025 by rpki-client