Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1deea0-00d6-3e33-a5a3-1553659f026d.roa
File: 9b1deea0-00d6-3e33-a5a3-1553659f026d.roa (raw, json)
Hash identifier: qgJqowazB8GqE1vH7zfWzlDqQ9ga5n/dAIXdRaelQYA=
Subject key identifier: 7A:93:0B:66:E6:59:A8:2D:29:0D:BD:5C:2E:D8:D0:43:47:BD:9C:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCFB6920C618CF442D0B0EB10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1deea0-00d6-3e33-a5a3-1553659f026d.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:b6:92:0c:61:8c:f4:42:d0:b0:eb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=557d0821-d2f4-4023-be85-250531c95a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:2f:19:32:6c:eb:fe:00:a5:5e:b4:32:15:
3e:9c:19:6f:74:ea:a4:a1:8f:07:7b:a1:c6:ee:6a:
9e:53:f0:db:d3:2f:f6:08:ef:a8:d3:76:9d:06:39:
a9:63:31:68:d8:a4:4e:a2:d6:b2:1c:1d:86:83:68:
d5:22:99:03:fe:6a:42:a1:d3:8a:95:4c:8d:f1:27:
95:c9:3b:87:ae:4d:c5:73:7d:69:18:95:60:62:5d:
42:83:54:c8:4a:58:c5:6c:e5:31:c1:53:57:d1:40:
94:17:3e:cc:6a:32:ed:9a:ad:9e:86:b4:bd:3b:12:
ab:8e:8f:bf:43:1d:c6:50:a8:d4:49:82:24:e5:84:
a9:4f:48:5f:27:ac:da:4a:6f:79:41:8e:63:37:bf:
15:b4:60:64:0a:bf:ad:03:8d:3d:a7:9f:d2:5e:e0:
fc:78:f3:1c:1c:12:2a:f6:0f:20:c0:27:89:ff:24:
10:65:f8:01:f9:ad:a9:ef:52:86:dd:dc:a9:7e:91:
d3:0d:2f:cb:bf:e8:4f:4e:0b:74:69:b8:bb:a1:9c:
c3:d7:1b:31:d0:22:30:e1:38:b4:dc:f0:0e:8b:b1:
cf:b0:ca:4b:c1:f7:9a:cf:21:71:17:25:b1:0c:e8:
f6:f5:a4:54:cb:bd:ad:a5:a4:dd:24:e1:ab:39:10:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:0B:66:E6:59:A8:2D:29:0D:BD:5C:2E:D8:D0:43:47:BD:9C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b1deea0-00d6-3e33-a5a3-1553659f026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:e5:99:bd:a7:a9:d2:1b:94:99:43:bb:30:07:51:cc:19:66:
42:6b:bd:ea:c8:1e:49:c9:40:6b:96:7b:da:df:84:fe:0a:1a:
e3:d7:67:c2:2f:17:3c:0a:d8:86:ef:e9:24:2e:d1:96:e8:53:
4a:0a:13:21:4e:92:9a:3c:7a:2d:77:17:e3:e0:c9:a1:27:c4:
fc:0c:0a:d3:ef:bf:8c:ec:eb:62:f3:83:fc:55:66:30:e7:21:
2b:62:ff:23:5d:ab:9e:2d:c3:49:c3:3e:4c:7e:a1:51:cc:6c:
92:82:bf:71:02:ff:ca:b4:fb:55:16:3c:ca:f7:ee:ad:b9:40:
96:dd:c9:07:b0:a2:09:53:05:ee:b4:ea:4d:53:13:6b:5b:3b:
0b:2e:53:0f:e3:4b:8f:80:eb:0b:b5:f0:9a:74:bb:e4:43:26:
9e:59:c2:f3:9b:4b:bf:02:32:d7:b6:09:b4:08:95:8b:e3:fd:
3b:32:4c:f9:e7:0a:ff:37:01:75:f9:09:70:f0:80:74:6c:03:
e7:f0:70:ad:44:44:0a:48:24:45:c4:f7:01:0c:eb:68:0f:a1:
8c:5a:c5:18:08:b8:5d:e2:d5:64:2b:0e:13:12:ad:0d:a7:8b:
96:04:0d:93:04:04:ff:01:9e:ff:bd:c8:bc:20:5a:58:4f:45:
87:b1:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:12 2025 by rpki-client