Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3eac4c1-3b5f-3fb8-baa0-d66eb04c362d.roa
File: b3eac4c1-3b5f-3fb8-baa0-d66eb04c362d.roa (raw, json)
Hash identifier: M4Qq/O358Knix/XEvcpWJQZxXvkxiTx0yhn2hF5+aH8=
Subject key identifier: D0:D6:73:3D:43:14:04:99:63:45:93:3C:F7:A0:BB:87:FF:E2:AA:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC5F3FE6957CBA4F950F8D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3eac4c1-3b5f-3fb8-baa0-d66eb04c362d.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:5f:3f:e6:95:7c:ba:4f:95:0f:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=6a9e0610-887d-4e50-97f1-ad247eb01e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:8b:35:c2:35:73:16:18:93:bb:87:19:b7:
b7:3c:60:e7:f4:14:07:fc:a9:92:e3:13:16:22:a8:
24:68:65:e3:45:dd:cd:08:fe:5f:d3:89:53:b4:3a:
30:a2:7a:b5:76:aa:3d:f6:e6:97:1c:82:5f:76:d3:
4d:dd:1b:49:09:db:97:86:46:3c:0c:67:e3:4d:15:
25:8b:50:22:d0:84:83:99:15:46:a5:36:3c:43:80:
b2:28:ba:6e:45:bc:66:6c:01:a6:b9:b6:f4:db:8a:
34:01:16:e0:7e:cf:5b:98:39:8d:62:ff:0f:d8:37:
e9:a7:6d:79:74:8c:69:e6:36:57:8c:5e:6d:3b:54:
6a:24:5a:c2:6c:0b:2a:98:aa:89:d2:cd:67:e4:81:
f4:e0:bc:19:61:c0:69:8f:a8:b6:54:dd:25:5d:d7:
cb:7e:25:b0:4c:dd:30:cc:08:3f:d0:48:ca:5f:ce:
f2:1e:d7:75:ad:c6:b5:ae:fa:b4:24:c8:ce:ac:82:
53:3a:0c:93:a5:37:26:f2:11:de:13:8a:4c:a9:4d:
4b:2d:17:f8:87:bf:6b:72:91:49:03:6f:bd:c9:93:
75:76:32:91:65:9a:42:3b:4b:eb:61:14:80:05:54:
4e:7f:f2:03:60:fc:cd:79:37:62:a4:e0:b8:82:57:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:73:3D:43:14:04:99:63:45:93:3C:F7:A0:BB:87:FF:E2:AA:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3eac4c1-3b5f-3fb8-baa0-d66eb04c362d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:03:f8:14:83:33:5e:c6:ee:d3:1e:d7:18:c0:1d:11:32:23:
5c:3c:ea:e6:08:a4:c7:d9:89:0f:74:0c:da:d4:a1:d9:28:1c:
a8:94:72:dd:11:36:b9:78:0a:41:ed:11:36:96:aa:c9:ae:56:
32:8d:25:01:10:26:5c:15:64:a3:48:db:d4:27:0b:ec:cc:23:
90:63:89:bd:01:09:0b:2f:1f:3a:d3:08:01:fc:84:f8:a5:af:
e4:bc:b1:cd:44:e6:e4:c8:60:2a:ff:5d:a5:70:6c:98:d1:33:
a8:a8:f7:56:b3:14:64:a0:48:4a:74:58:42:39:10:26:cb:5a:
17:f3:94:60:f3:e7:e6:60:46:7d:2e:07:6e:ed:68:a3:92:14:
6c:2e:89:db:14:5b:2d:ed:9c:3c:de:7a:bc:bc:18:a7:71:2a:
27:40:8f:20:3a:d2:cc:e5:8f:31:d7:35:c7:e6:2c:68:a1:ed:
fc:8f:61:65:54:d0:de:77:b0:1e:4f:b2:62:54:11:05:4b:48:
df:c1:74:89:22:4e:c8:ed:07:d5:48:20:66:09:69:a7:3f:55:
0c:dd:94:7c:d7:8e:4d:d2:f1:89:58:67:c8:e9:0e:09:bf:b0:
ba:7d:e4:83:76:29:f5:fd:b6:ea:31:ca:3b:ab:57:ba:e5:ed:
17:d6:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:05 2025 by rpki-client