Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89c317c8-b9da-3613-b711-8b7e103e68cc.roa
File: 89c317c8-b9da-3613-b711-8b7e103e68cc.roa (raw, json)
Hash identifier: j8zSUquXjVyGkk6Lt9PD40vh/w/mNmmoZoM/Ce1JO7A=
Subject key identifier: 89:0E:1A:EF:30:3B:65:84:C3:7F:18:60:34:D0:03:90:BD:20:CA:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCF50454020931B79E2F3C4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89c317c8-b9da-3613-b711-8b7e103e68cc.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:50:45:40:20:93:1b:79:e2:f3:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=717569f7-b686-4350-ba41-d22a3723616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:9b:f7:19:63:28:93:6a:c7:e2:77:f1:7e:
d4:ef:87:7d:77:be:b9:b8:53:6c:cf:05:e2:05:d8:
45:99:69:18:8a:db:9c:ab:f4:e1:de:cb:84:82:b5:
ff:e7:39:d0:1a:15:16:f5:de:18:14:71:f5:ad:6e:
bb:d3:81:f5:40:c6:b7:63:d6:eb:f9:0d:cf:fa:d1:
ac:c6:d1:a4:80:c2:b9:d7:07:80:39:29:6f:7b:a2:
7d:eb:13:7f:66:bc:39:e2:4a:e1:ec:3e:7f:53:2b:
c3:2b:50:3f:a7:fe:0f:cd:8c:bb:4a:4c:1f:d4:ab:
8b:ed:3e:34:1e:8e:15:52:5e:ff:8e:ff:0c:08:45:
be:df:0f:ae:fd:a2:c9:0b:53:b4:31:66:4d:11:eb:
99:41:dc:9f:fe:6f:3f:d4:78:c3:ce:87:39:3e:46:
7e:06:02:e4:17:bd:07:57:da:03:a0:77:f2:b4:e2:
b5:74:e7:c3:47:98:26:57:2d:01:2c:f3:82:ef:9c:
6f:2f:65:d6:ba:53:fa:b1:84:6c:33:ec:fc:6e:a5:
8f:c3:46:a5:b8:7a:04:70:cb:df:46:77:27:24:81:
18:35:e5:d9:9a:90:ac:3f:e5:24:50:f3:5b:c4:5b:
12:5f:02:44:a5:3a:1a:53:54:36:2d:47:cf:45:a9:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:1A:EF:30:3B:65:84:C3:7F:18:60:34:D0:03:90:BD:20:CA:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89c317c8-b9da-3613-b711-8b7e103e68cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:78:f5:01:6a:5a:ac:38:3c:b8:f1:5d:27:aa:c6:87:eb:98:
45:9f:01:a3:2f:3b:07:50:3e:68:6d:d2:a8:28:e4:ef:e9:60:
1a:e9:5c:4e:ea:38:af:74:63:44:d4:4a:7b:38:2a:60:f0:3b:
1d:3f:c9:51:04:f6:05:27:ec:a6:d1:5b:98:bf:0f:cc:d8:42:
6b:3d:da:b7:08:8b:5d:bc:23:df:fe:33:4c:7b:9e:16:44:44:
1e:d0:e7:d0:92:31:66:32:f4:9c:83:db:2e:1d:07:da:e1:a9:
ae:83:bb:3c:2d:24:ae:42:e2:af:c9:cf:ab:f1:aa:0c:e5:43:
92:38:3a:8c:96:6f:f8:c5:ef:6a:bd:f7:45:51:06:e3:79:90:
4b:ae:72:6b:4c:fc:77:f9:8d:91:37:30:f0:97:f3:88:44:1e:
48:d7:fb:73:2c:9e:ba:7a:0a:3c:30:b5:fe:41:b9:d5:c4:d5:
22:d2:b9:51:41:85:65:e4:9e:45:f5:33:a2:2b:54:5c:39:6e:
43:ea:3f:54:ab:78:34:34:3c:1a:03:5d:34:0f:d2:42:ef:ff:
30:4e:f2:09:28:42:99:60:fb:ee:00:dd:a7:ae:2c:6a:a3:24:
43:2b:a2:ca:d8:46:e5:93:92:13:4b:53:7c:49:7a:bb:64:43:
e7:13:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:57 2025 by rpki-client