Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0073c2b-7da3-3f54-b978-a4a491edcdde.roa
File: b0073c2b-7da3-3f54-b978-a4a491edcdde.roa (raw, json)
Hash identifier: o2AEr9ybwUrirPARVdPa7u4FY8hY+EaedCCeQhFzxqE=
Subject key identifier: 37:F4:16:6F:0E:AB:C0:8E:CB:4C:4D:4B:08:56:40:B2:48:56:5A:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCF509D7AC1E38CCD61F94E90
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0073c2b-7da3-3f54-b978-a4a491edcdde.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:50:9d:7a:c1:e3:8c:cd:61:f9:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=6a03ab5e-48ad-4f61-a414-33dbc04072f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:8d:cf:d7:00:bb:fd:bc:c4:c4:c2:e2:cb:
5a:a4:2a:d4:d0:0b:9e:35:02:03:03:da:79:af:24:
fe:03:1d:25:83:d9:16:6c:37:1f:07:aa:f4:e4:2d:
c6:79:fc:bb:7f:0a:5a:0c:d0:3c:ab:ba:c9:3c:27:
f1:56:2f:fa:82:4c:e4:a6:37:45:b0:43:6b:d4:4b:
a4:87:c0:4a:9e:d0:31:15:e4:39:e1:8a:38:27:78:
f1:15:33:4e:16:9f:b8:a5:26:eb:6c:34:31:3d:2e:
e6:07:fc:c2:d2:59:84:64:59:32:21:ea:24:80:51:
41:3e:af:43:d2:b6:64:86:d4:ea:9f:66:ec:53:a2:
f6:2c:85:ff:db:70:85:e0:06:6a:04:d9:d7:7e:89:
d6:c8:08:bd:11:ba:d7:48:c2:39:da:1d:32:93:f3:
e9:a1:63:eb:3e:7e:11:17:39:f3:7d:8b:c2:5b:44:
e3:36:97:d5:9a:2d:ca:0a:ad:90:71:40:14:ac:d8:
2a:2b:f5:85:88:d0:10:73:93:8e:3a:d2:78:c5:0f:
3f:46:a4:3f:82:9d:5f:e5:6f:fc:18:1e:38:ec:ab:
3d:2c:dc:55:8e:1e:43:28:78:16:90:a6:a9:a9:8f:
c8:80:4e:ff:54:42:3a:6a:4a:ac:60:c7:bf:11:26:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:16:6F:0E:AB:C0:8E:CB:4C:4D:4B:08:56:40:B2:48:56:5A:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0073c2b-7da3-3f54-b978-a4a491edcdde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:14:e3:f4:39:31:75:6d:5a:cb:9b:12:08:31:1d:57:e8:e7:
e1:9a:b4:b9:5e:ab:f8:66:ee:8c:50:1d:51:35:af:3a:59:e0:
7c:66:12:25:9d:9e:3a:d9:09:68:83:1f:f8:54:ee:2a:3f:69:
2e:fd:b6:5e:7b:0d:b8:ff:63:f9:4d:58:24:4c:a4:ef:63:7d:
69:bb:f5:6a:9a:c7:d1:98:76:90:c3:68:8e:f7:83:61:8d:aa:
fe:6a:9c:b0:34:33:db:9d:64:ec:28:f8:e4:ba:c4:ed:c8:e8:
ea:34:09:ba:58:15:f9:5d:b3:c3:24:85:67:c1:e1:4d:71:fc:
f6:77:5d:00:b8:ff:89:44:be:78:ae:e6:f4:54:81:14:3a:13:
73:a5:fa:00:b5:03:0e:94:6d:a4:47:6b:5d:77:7f:0f:51:4d:
f9:15:52:98:96:89:9f:a0:9a:c7:05:97:a9:95:65:c3:1f:9a:
df:d7:dc:d8:db:03:05:68:6f:a9:67:f3:ca:02:da:b0:46:2d:
8b:ac:e1:7d:de:1f:05:0d:d7:5c:e4:1b:35:fa:82:74:8c:44:
c4:22:1a:95:6a:7f:12:d5:01:5f:30:78:8e:43:aa:8a:8e:f1:
14:c3:72:e2:a2:e5:47:5d:b1:ad:12:a4:2f:d3:2d:ae:9e:7d:
2c:7a:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:21 2025 by rpki-client