Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a208cf93-63e5-38ff-b2b5-2771159a8810.roa
File: a208cf93-63e5-38ff-b2b5-2771159a8810.roa (raw, json)
Hash identifier: DTRO5U0N+w+VMYB/l2YYr415Oc4vsO5LQ7l+rmJgU7M=
Subject key identifier: 1B:0B:1A:2C:E2:4D:26:15:AD:F9:99:7E:43:57:56:B6:80:FA:9B:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D80EFF9C186D18B5E78BF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a208cf93-63e5-38ff-b2b5-2771159a8810.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:80:ef:f9:c1:86:d1:8b:5e:78:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=3def5a6a-e892-420a-b25e-bcb470861efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:a0:dc:fa:c2:0d:29:ee:dd:6f:28:7f:f1:
a7:1a:51:1b:df:ee:cd:0b:ae:84:80:da:28:71:3c:
41:44:d1:c1:f6:94:74:46:4a:b1:b8:bd:1e:8a:13:
63:ee:b9:c5:9f:35:f1:74:df:11:0d:bf:f4:be:f9:
14:46:bc:34:f7:04:8b:61:3b:11:b8:84:69:91:5c:
2d:62:55:e9:c3:43:42:7f:10:08:28:5f:e9:5c:74:
ed:02:0a:21:2a:bb:bb:6a:03:50:29:90:fb:47:20:
fa:ab:82:46:28:14:f1:ef:47:6b:cf:a5:05:62:91:
7f:7a:e4:4e:8f:d8:54:07:12:3e:c7:53:d9:81:c0:
85:49:a7:5f:de:d0:67:af:3f:aa:dc:0f:a9:7c:be:
a3:8f:b1:60:4d:32:98:43:b0:c5:77:78:36:87:12:
a8:96:e9:d8:33:37:58:4d:16:89:70:30:83:cf:3c:
b0:7f:db:8a:da:41:c6:9c:ab:aa:b8:6d:5f:4b:ea:
cc:06:9b:d2:b4:cb:77:16:88:7d:75:6c:9f:ff:ab:
3f:f1:b0:b3:04:08:01:6c:08:59:51:c3:f7:d1:cd:
4e:28:39:a6:a2:cd:8f:c5:5a:be:c8:37:e8:25:37:
0a:7d:bc:04:dd:ab:4d:96:b3:3e:2f:e4:19:0c:fc:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:1A:2C:E2:4D:26:15:AD:F9:99:7E:43:57:56:B6:80:FA:9B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a208cf93-63e5-38ff-b2b5-2771159a8810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:d5:08:54:6b:42:e4:84:39:f6:a6:b2:3b:70:16:64:1a:10:
fb:1d:c0:4b:37:05:be:1c:69:e7:29:f6:24:21:fb:2d:c0:c1:
a5:0f:7e:8b:d1:b1:d5:fd:af:13:cc:0d:c6:5d:0a:fe:06:41:
f1:85:08:26:87:51:7a:ff:10:55:a0:15:2a:b3:fb:97:ac:f9:
62:f5:ee:2f:3e:9b:02:8f:f6:c9:ae:c3:dc:90:7f:68:ef:1a:
93:22:3d:ae:33:4f:e4:d0:e1:ee:1e:cb:5c:4f:b9:f5:04:09:
f7:33:8f:23:15:92:c1:2a:b0:8c:04:13:3b:1a:f7:56:a9:fa:
f6:df:66:b5:ce:0f:3b:40:ab:f0:6e:1b:58:63:37:c9:57:b7:
b9:8a:b1:7b:f2:7b:0b:5b:28:64:66:13:e6:19:6c:52:d7:6c:
0e:93:39:19:23:c1:12:02:c4:df:5c:8e:5f:da:ad:fd:5d:c3:
78:42:33:bf:24:1e:a1:e2:ea:c1:26:5d:ab:1b:ca:ce:57:72:
5a:d9:83:a3:21:6c:3f:c2:a9:ea:5d:59:05:03:14:28:8e:32:
11:bd:a0:03:11:42:57:79:7e:d7:48:e8:81:d6:bf:0d:b2:6a:
4e:47:d2:10:ac:e3:3e:40:ae:a8:cd:df:4e:da:f0:76:18:5b:
d5:81:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:26:13 2025 by rpki-client