Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b98405-fb44-3a4c-ac14-fc5aa3e213b5.roa
File: 97b98405-fb44-3a4c-ac14-fc5aa3e213b5.roa (raw, json)
Hash identifier: +5kef32LVJivY2U473ENBXTw1pbW8AycvY4VxJpPMd8=
Subject key identifier: 31:65:1C:F3:F0:90:06:76:D0:5E:05:17:DB:60:E7:A1:13:F3:E5:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F3C78A26D18CAB37857CE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b98405-fb44-3a4c-ac14-fc5aa3e213b5.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:3c:78:a2:6d:18:ca:b3:78:57:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=086b3272-c76e-4dc9-a446-2439a33a8a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:15:cc:1b:ee:0a:2f:ea:39:73:c0:50:71:
91:ad:cf:27:34:be:72:66:67:b1:33:cd:04:95:64:
7f:c0:40:90:24:c1:de:33:4a:be:bb:b8:f6:70:3e:
92:b9:03:49:fd:f3:af:46:06:83:c0:d4:29:57:bd:
f7:ed:ec:2a:d1:da:d1:ca:fa:fd:cc:35:a1:5a:6e:
4d:c6:6f:00:c5:b1:13:fc:57:f7:b1:ce:b6:11:fe:
0b:7c:8f:ef:70:ed:da:b1:54:7e:05:c3:8f:9c:8e:
2a:4a:65:af:fa:7c:5c:eb:57:37:78:3c:82:a9:b9:
ad:d2:8c:f0:85:8a:16:3c:e3:83:79:63:b0:ee:a2:
92:9d:9b:8b:92:6f:d0:a6:73:0d:0d:41:21:28:78:
cf:1c:74:6f:4f:57:72:2a:48:6e:8c:cd:e4:b3:66:
18:6b:e9:43:3b:e6:04:4b:06:15:46:8c:55:e2:82:
dc:1e:f4:15:46:77:dd:b7:e4:5f:42:41:ad:93:a0:
85:2f:bc:a8:a6:5b:3a:1b:aa:9d:a8:00:55:e2:b3:
b5:b7:24:98:51:c0:95:e6:5a:3b:94:7f:3e:ee:68:
21:e6:e9:a1:bc:14:01:a3:9a:29:e2:cb:80:27:ae:
5b:bc:3c:4d:10:56:2d:5e:30:17:66:03:83:fc:16:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:1C:F3:F0:90:06:76:D0:5E:05:17:DB:60:E7:A1:13:F3:E5:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b98405-fb44-3a4c-ac14-fc5aa3e213b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:fe:6e:ec:31:2c:9d:09:e6:1a:56:08:98:2a:2d:ae:0e:ce:
ec:ca:f0:cf:e4:aa:ab:5a:d6:bc:2a:5d:f3:dc:61:55:d4:e8:
b4:be:c2:02:c3:e7:fb:ba:3b:11:71:60:2d:c9:5a:98:3a:1b:
8f:60:e2:cc:04:d2:f7:8e:8b:eb:35:dc:6f:c5:30:42:5c:ea:
f1:00:81:be:87:5c:63:f7:da:1c:c7:88:b7:b3:10:52:9a:38:
23:99:32:d4:e5:7e:26:16:68:43:7f:71:56:61:24:33:10:26:
b8:c1:47:82:e4:25:ac:40:d2:e5:17:64:26:31:65:ee:67:58:
ae:f2:a7:b9:a4:f0:3b:3b:98:48:fe:84:fa:36:d0:29:01:12:
34:b9:aa:80:59:42:aa:1e:6a:d8:ff:cc:6e:8c:98:ef:9f:9b:
fd:c7:21:4a:fb:68:f8:11:07:02:9a:63:9c:c5:28:2d:24:c0:
d3:96:8b:be:b8:29:49:f6:52:d8:fe:ad:7c:da:7d:13:38:ce:
e5:1f:94:95:80:c6:b9:35:b7:64:59:45:cb:28:f4:f1:e1:09:
a1:f5:bb:40:bf:28:f7:40:be:33:51:52:89:97:54:57:6b:82:
c0:2f:a2:39:9a:f1:ff:85:68:d0:fd:4a:9d:a7:5f:52:aa:28:
24:c9:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:23 2025 by rpki-client