Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c45e9515-a844-3b57-af3c-cfaba95e8230.roa
File: c45e9515-a844-3b57-af3c-cfaba95e8230.roa (raw, json)
Hash identifier: E9JCOHTu010r/svenQ+FQ9GTkT7qw/DzEuRdR/e5Vas=
Subject key identifier: 21:35:AB:9B:A7:D5:80:4A:B2:7D:D9:38:CB:A5:90:80:34:35:AF:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E47D3072447FFE43033B00380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c45e9515-a844-3b57-af3c-cfaba95e8230.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:47:d3:07:24:47:ff:e4:30:33:b0:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=65ef5546-b190-4d6a-8277-6e1619cd7f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:42:e7:bd:32:86:36:5d:8e:01:88:e5:b4:
06:88:16:e8:20:f4:b9:82:e9:b0:4a:a9:fb:7b:42:
5a:69:a8:37:5d:94:37:c4:51:32:18:dd:64:df:c3:
74:5b:48:18:d4:43:15:ef:ad:35:a0:36:be:36:ab:
07:6d:ee:3d:89:19:cc:92:ea:0e:73:da:f6:a6:57:
37:91:a7:f1:c6:19:60:65:70:86:85:a1:1a:c6:e1:
a7:2d:81:9e:43:c7:84:2b:1f:73:ec:aa:c2:ba:87:
a7:10:f3:ac:67:33:5e:e9:e9:08:d8:5b:e9:5a:d0:
61:6b:38:9a:13:6f:99:38:c0:e1:b9:47:58:2c:a4:
b4:38:eb:2a:80:d7:a0:da:58:09:fb:f8:67:9f:6c:
0a:9c:b9:bb:fe:47:b4:5d:48:9b:98:66:9c:c9:55:
c8:23:61:fb:8c:b8:17:c1:63:b1:37:76:2f:24:a8:
af:4c:43:03:94:f1:2d:0b:b4:48:64:38:6e:ec:72:
b9:80:3e:63:fd:33:19:d0:4a:7c:76:c9:57:24:54:
82:ca:9d:52:37:10:5d:94:c6:9c:f2:57:ba:71:2d:
01:40:03:c2:ce:01:b2:34:2d:ae:88:03:3e:c8:5f:
f9:3f:b2:96:45:9c:69:dc:2b:1b:05:f8:ea:50:42:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:AB:9B:A7:D5:80:4A:B2:7D:D9:38:CB:A5:90:80:34:35:AF:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c45e9515-a844-3b57-af3c-cfaba95e8230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:e1:d4:cc:28:0d:12:42:a3:f8:a5:b3:63:b5:58:39:30:cf:
f7:7c:3c:82:e4:05:ec:b2:58:fa:3c:b7:13:3f:31:9e:4e:ee:
b9:a0:ae:eb:ae:87:03:61:90:87:6a:7b:7a:a5:c6:5b:0f:5c:
5d:cc:e1:b5:5e:d0:7a:67:9a:21:19:91:03:3b:fb:62:84:af:
3f:35:3b:0f:22:ff:d1:05:5d:0f:2e:99:e5:01:e2:26:2c:7a:
a3:23:f2:0e:1c:b7:50:1d:19:b3:7e:9b:36:ea:44:fb:a4:e1:
ee:29:28:46:fe:ad:c2:17:5b:7a:3c:02:bc:51:d2:58:5d:3d:
5e:9f:d1:87:e9:af:3d:84:b9:00:e0:f1:9a:ab:78:b7:69:1d:
ea:a5:f0:dd:a1:76:de:51:2b:20:28:b4:98:f8:c0:15:09:35:
55:7c:d4:8e:9a:53:7b:e7:d5:dc:0c:40:eb:ee:f9:c1:c8:58:
48:b7:c2:34:da:f3:05:c7:8e:82:91:30:9a:21:55:8d:b3:f0:
13:12:50:9b:e3:87:d4:8c:d5:8c:22:c4:80:ad:6c:2a:e5:5f:
7b:c3:e7:f3:96:c8:84:93:4b:c0:ea:b7:b3:11:79:0d:b1:ff:
04:f9:ed:5d:c4:98:a1:c0:48:fe:3d:66:3c:ef:ae:e6:0c:f6:
7c:b9:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:58:31 2025 by rpki-client