Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3654696-a65a-31d7-b011-3fb8b8c1ecd4.roa
File: c3654696-a65a-31d7-b011-3fb8b8c1ecd4.roa (raw, json)
Hash identifier: 3ngks0czryZbLRyeo3f3D8mYAs4j9gEsKCIN38beSR0=
Subject key identifier: 2E:BE:A2:A0:78:2F:3A:A2:AF:84:E8:D6:B9:B1:2B:6B:95:BC:E1:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9C59372A71D8202F5309BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3654696-a65a-31d7-b011-3fb8b8c1ecd4.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:c5:93:72:a7:1d:82:02:f5:30:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=f36ee262-cd4b-4c28-9c10-78498ad44970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:94:4e:ed:f2:e6:81:86:26:1d:db:4b:47:
e8:fa:6b:08:c7:7d:eb:44:6c:af:d5:b5:27:23:dc:
8b:4d:d2:24:14:e2:79:34:fe:2c:57:0c:26:57:f0:
b5:dc:7a:18:48:83:e2:ac:37:1e:38:64:c4:10:01:
ff:4a:3c:4b:1a:cf:1c:33:f9:c5:6b:7d:ce:d1:94:
14:55:8c:88:8f:9b:f7:64:be:0e:9a:45:04:1c:77:
08:b2:a7:da:27:a6:3a:78:89:7d:4b:39:86:8a:fb:
5d:aa:9c:91:36:46:b4:b6:82:74:9f:0c:b8:60:05:
e7:aa:43:b1:7f:b2:a0:ba:e5:e5:db:ad:7a:b9:ac:
85:55:3b:f1:54:18:2e:37:80:1b:d9:cf:05:02:8e:
51:05:80:22:ae:39:e9:76:d3:25:64:db:eb:d1:35:
08:83:86:95:24:e9:fd:a2:05:08:e8:19:8d:85:b6:
42:d1:4f:c3:51:58:d9:7b:83:6c:e4:c4:45:c5:dd:
b8:d1:fe:6b:76:28:f1:27:15:d4:a5:3d:48:73:6a:
09:ce:e4:d0:e3:90:22:2f:ab:bd:d3:3a:24:11:96:
04:58:90:85:c4:b6:f1:88:44:6e:21:7f:0d:01:fd:
e1:21:64:e5:8f:d4:7d:9a:b5:7c:0e:93:fe:c0:d7:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:A2:A0:78:2F:3A:A2:AF:84:E8:D6:B9:B1:2B:6B:95:BC:E1:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3654696-a65a-31d7-b011-3fb8b8c1ecd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:58:4e:b4:80:35:96:12:4d:6d:99:32:eb:59:8b:0f:ef:92:
9b:df:c3:5f:6b:e2:84:9d:9e:79:8c:5c:82:2c:74:57:7a:d3:
b0:31:21:03:0b:53:f0:99:52:75:e5:7b:0b:48:08:2b:2b:2c:
bf:6e:1f:30:81:79:5f:a5:e6:21:74:5d:be:0d:f0:9c:f0:79:
3e:00:d8:ae:89:9e:97:58:87:84:16:63:5c:d9:45:89:97:ad:
dd:a8:f1:d8:5b:71:91:70:8a:f0:84:10:d0:f2:dd:f3:e2:87:
04:ed:d3:f0:a5:90:0b:61:b5:6b:d4:d3:99:f4:b4:2e:7f:09:
14:e7:fb:39:02:53:38:45:bc:0a:5c:46:83:32:e2:df:e0:33:
64:45:a8:cd:bf:31:be:4d:3d:50:2e:1b:7a:d7:a3:fb:02:55:
0a:ba:4e:3e:02:9d:fc:04:44:ea:ad:9f:b3:79:ff:48:f3:0f:
be:56:56:c6:a4:f8:60:b3:8f:61:f5:79:ba:90:e8:b3:97:9b:
e7:90:20:43:9c:e5:66:5b:80:a3:35:b8:3e:ec:67:3b:77:1d:
b3:e3:f7:cf:ed:b1:99:c4:50:13:69:2d:31:7e:fe:5d:78:72:
7e:f3:1a:7f:4d:f8:f0:49:fd:9e:52:6f:21:f1:f5:6d:53:96:
4f:68:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:08 2025 by rpki-client