Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6778989-ee29-33ef-ac7c-9ef6dee05f72.roa
File: a6778989-ee29-33ef-ac7c-9ef6dee05f72.roa (raw, json)
Hash identifier: fHIJe74VV1DE00XkrW3D4WgPp7IH4gPLOKxgvJh5kYM=
Subject key identifier: 22:D8:9B:FC:02:73:37:34:DA:DC:E4:14:5F:C1:A4:4D:BD:7B:C5:C6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59F95E9ECAA14DFEA5259900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6778989-ee29-33ef-ac7c-9ef6dee05f72.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:f9:5e:9e:ca:a1:4d:fe:a5:25:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=42095b3c-d08c-4212-8419-a463bb83a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:70:f9:98:86:d5:62:f4:56:fb:b6:3c:d1:
5a:8d:a1:6f:75:5a:52:57:ea:63:03:cf:2c:17:41:
e9:2b:f9:cf:7f:9a:85:bc:c3:19:bb:10:3c:78:4f:
ed:30:97:ed:cb:6c:62:70:9d:62:f2:b4:ed:f8:1d:
64:4a:83:7b:03:95:52:1d:0f:46:fd:01:88:c3:70:
9a:70:a4:80:36:cf:c8:91:37:c2:d1:29:da:b7:37:
21:9d:78:72:71:46:06:02:99:f0:93:6b:68:1f:10:
db:b0:96:d4:d8:79:88:2a:22:8b:fe:93:d2:cc:f8:
a9:87:87:b9:85:b6:3f:95:75:3e:bb:5d:bc:31:96:
1d:84:a2:7c:23:09:9d:57:57:dc:c8:09:fc:e5:75:
40:13:15:54:da:9a:b5:4c:98:c6:3c:79:a3:8e:08:
9c:ef:24:1f:76:a7:76:7d:e9:e1:2c:f2:cf:d1:1f:
f0:c3:c2:b7:cb:d5:ad:6c:6a:c9:aa:38:a1:d4:0f:
51:03:88:81:66:89:36:56:c4:1e:21:51:90:50:d0:
db:6b:5e:f5:f1:c8:62:84:04:11:c6:f5:4a:54:13:
f7:54:0d:77:80:f0:c4:3c:b9:05:06:63:c9:da:bf:
50:2c:8d:79:f8:e8:56:95:88:e9:d2:62:71:20:8b:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:9B:FC:02:73:37:34:DA:DC:E4:14:5F:C1:A4:4D:BD:7B:C5:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6778989-ee29-33ef-ac7c-9ef6dee05f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:7e:8f:ec:e8:91:45:e3:63:5c:00:d7:2a:27:ec:0c:c8:d3:
34:56:db:f7:b1:9a:f4:86:0b:27:3b:4f:16:c2:e2:fa:f6:80:
28:45:f7:cb:a5:6c:10:5c:9a:3c:aa:7f:89:de:36:19:bd:4b:
a6:27:c3:f6:5d:89:50:32:82:f5:32:74:1c:aa:17:a4:cc:a8:
4f:eb:1e:17:28:47:4a:d9:fb:5e:ac:97:7b:a6:77:b0:47:50:
3f:47:bc:09:5c:ff:1d:d2:6a:14:33:ba:eb:40:43:f7:13:db:
47:a6:a3:96:f0:e6:4a:ca:56:21:f2:11:15:ea:dc:8c:d0:22:
1d:d3:65:18:32:e5:88:db:f6:bd:5f:47:9f:f3:b5:7c:20:48:
9c:7d:77:35:8c:63:23:ae:22:f0:12:1c:bb:77:0c:bb:8d:62:
2f:83:52:98:59:f4:2f:b3:b3:f4:72:40:22:1f:e7:20:62:1e:
ee:a2:e5:26:5c:fc:2b:d8:6f:65:be:32:29:4f:fa:a4:3e:4b:
56:bb:83:c2:48:5f:96:34:85:92:3a:2f:99:38:88:e1:0a:4f:
95:12:bf:0f:bb:ba:b6:b6:20:8d:b5:ac:45:53:c3:06:e0:ba:
c2:b2:dd:17:b7:e7:02:15:54:e2:64:2a:93:72:57:95:bf:8f:
ea:fe:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:02 2025 by rpki-client