Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aef1ff64-2660-3a66-b29c-872878bd63c0.roa
File: aef1ff64-2660-3a66-b29c-872878bd63c0.roa (raw, json)
Hash identifier: MFWXoU1QSXGEGS71ncB255WHRuIm8EWDZ28dlXqgEhw=
Subject key identifier: B5:E3:86:ED:EE:90:8D:DA:89:42:93:B6:39:42:F9:40:5B:DD:60:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E964FEA21D1FB6056ADCBF500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aef1ff64-2660-3a66-b29c-872878bd63c0.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:4f:ea:21:d1:fb:60:56:ad:cb:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=69ed6126-6b63-4705-aeac-d7209e34ea20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:a5:8b:cd:b2:3d:88:db:eb:f5:8d:6a:49:
6a:fc:34:bb:94:78:f0:e0:13:50:c5:5c:7a:d1:10:
de:70:d2:84:22:d6:90:09:72:f3:e5:2e:29:1f:fe:
41:8a:99:d8:c9:fd:d4:fe:21:a6:9b:3e:18:f7:cd:
83:2b:6c:31:02:60:df:a2:86:63:fd:93:0a:61:9c:
87:1e:0b:20:fe:08:06:b7:53:27:77:70:f0:f2:32:
08:4d:bf:c8:a5:f2:79:43:fe:62:f1:d8:63:68:8d:
99:88:92:32:23:1f:ee:3a:22:ce:24:5d:7a:41:6d:
be:38:da:19:77:57:e6:a7:c6:85:0a:c5:61:eb:e9:
86:56:82:ce:d5:47:fa:cf:69:b5:aa:98:79:bd:1b:
78:be:c9:57:66:98:d0:e5:ea:57:49:57:a3:6b:7a:
5e:92:6c:7d:8f:7b:7c:97:d4:36:04:1e:a1:ec:3c:
f8:01:a7:f2:ae:2d:d5:73:d5:69:16:63:b6:af:2b:
bc:a9:29:f8:14:4a:2b:2a:70:fc:9f:21:4b:b5:c0:
cb:14:5b:b2:83:9a:59:cd:06:f7:8d:d1:01:df:6b:
44:83:2b:6d:29:ef:e8:96:6c:bf:e6:47:24:d8:4c:
f4:5a:ed:4f:0e:1e:59:4d:70:2b:46:4d:a7:79:2e:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:86:ED:EE:90:8D:DA:89:42:93:B6:39:42:F9:40:5B:DD:60:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aef1ff64-2660-3a66-b29c-872878bd63c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:15:47:a1:71:2b:a6:85:58:43:55:54:72:60:8f:28:dc:d4:
fe:50:17:39:5a:76:e1:e2:d7:53:99:77:13:01:7d:9e:ac:d8:
5e:a0:4e:95:9d:9a:e1:df:f4:50:42:45:43:d6:77:73:85:da:
73:a6:be:ce:ea:75:65:51:74:11:6e:0c:97:e3:0a:6e:47:3e:
2d:9c:9d:56:9f:04:b6:0a:d2:83:2a:91:f2:41:b5:5f:20:18:
c7:8c:8b:eb:f2:e4:56:57:74:99:b8:6f:cc:97:07:95:d0:7f:
37:02:ca:f0:c0:c4:31:55:a7:43:a7:96:c6:07:17:0b:ec:0c:
d4:87:60:82:9f:7e:be:b2:4f:40:47:d6:04:fb:76:d1:b0:c0:
57:6c:7a:29:f1:46:be:d9:c9:8b:e2:e7:09:62:37:03:a6:a2:
3d:97:dc:70:cf:fb:f9:bf:be:19:92:a1:53:28:ed:18:db:57:
20:b9:73:3f:72:c1:5d:4d:38:42:72:cb:3e:fb:b0:8e:4d:38:
b7:f3:bd:1a:e8:b3:b5:f7:dc:31:71:c6:18:fb:b9:37:37:e0:
43:06:0d:93:e0:a0:47:80:6f:fb:5c:d8:03:da:60:8e:a1:c6:
f4:42:16:ee:b4:84:50:89:b9:fe:f5:df:5c:fc:e1:fd:87:42:
ae:9d:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:28 2025 by rpki-client