Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf01d7a7-49cd-3f59-bc2f-a53fea7383df.roa
File: cf01d7a7-49cd-3f59-bc2f-a53fea7383df.roa (raw, json)
Hash identifier: sNVJd1a97+WFuOOd0Gaut/cPwGR3TcDGTwPlsYGeLug=
Subject key identifier: 28:EC:50:5D:A6:9F:DB:6F:CD:C0:68:23:7F:8F:AE:15:44:EF:31:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD2748D355761FFBBEC391C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf01d7a7-49cd-3f59-bc2f-a53fea7383df.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:74:8d:35:57:61:ff:bb:ec:39:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=f183f7fd-646f-414c-bc5f-c73413886a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:ee:66:93:90:70:83:e8:48:85:e2:68:4a:
27:6d:eb:b8:5d:da:82:b1:9f:83:df:76:3a:4b:46:
8e:18:65:a8:a4:ad:6d:6a:12:ce:92:a0:ad:9f:88:
69:64:74:8d:b2:f1:52:2b:f2:43:26:d4:6e:94:c3:
ff:d5:c1:51:fc:0e:53:bc:c8:da:a0:1b:a9:92:72:
28:6b:ee:db:af:1a:44:71:f2:d4:39:22:9b:f7:3b:
3d:12:8c:c0:29:2b:cf:e2:5e:e8:ae:f6:51:04:0c:
30:b9:f7:61:46:1c:10:bc:e3:c3:55:0c:6b:e3:99:
a1:59:97:7d:5c:60:05:3f:78:ae:7a:90:2f:52:18:
5b:8b:1b:01:05:4b:85:ba:08:8f:ff:80:9d:01:0f:
f0:7b:cb:ca:f1:17:c2:10:88:5a:6d:45:54:78:1d:
08:c0:58:52:63:71:05:94:77:3c:3d:4d:04:f9:0b:
ad:70:84:21:f3:ff:7b:23:d8:40:6e:b5:77:92:52:
a5:0a:51:a2:61:1b:27:f3:07:75:4f:3b:5c:32:52:
d2:07:5e:05:f6:86:11:c4:b6:6c:be:9a:59:d2:d3:
b5:ae:9e:74:e0:f9:85:65:99:61:c5:d7:6a:4e:e1:
06:90:bd:8b:2b:a2:ad:24:6b:d9:46:c2:be:f8:bd:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:50:5D:A6:9F:DB:6F:CD:C0:68:23:7F:8F:AE:15:44:EF:31:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf01d7a7-49cd-3f59-bc2f-a53fea7383df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:3a:fc:fd:bd:68:96:dd:f1:b1:cc:b2:fd:e7:d8:be:b7:ff:
c9:d1:f6:01:20:48:aa:0b:6f:2a:0c:2f:d0:0f:ce:19:d9:27:
a5:08:5b:c5:33:92:9e:ff:91:66:a7:f1:5d:75:29:fc:1c:8a:
b0:df:d7:11:a8:a0:dd:35:80:5d:9c:6e:cd:2e:ce:dd:a3:c4:
17:c8:86:0b:fd:ef:94:78:17:ae:b8:6a:c7:a1:9f:24:3b:d2:
66:39:10:ac:37:7b:6d:d4:ae:30:06:e0:3c:b5:4e:47:ee:30:
53:84:a8:35:6b:29:86:be:95:96:22:ca:d7:21:77:8c:1e:ce:
25:fe:b8:68:b5:56:db:44:27:41:88:7b:e6:f4:6a:70:16:f1:
95:f3:b3:a4:c2:04:a0:96:b7:c0:e1:42:75:d2:64:4b:88:d2:
11:8c:90:10:7c:e5:88:36:83:c4:8f:2b:07:8c:25:a9:61:c3:
e6:d2:a4:1c:63:89:72:ee:c1:11:a2:0a:f4:c6:f9:78:d9:05:
07:49:48:83:0f:8a:87:57:de:36:03:60:fc:6a:9c:73:02:3d:
a4:c7:f8:a5:9d:07:69:14:ed:98:56:bf:71:9a:21:db:1d:aa:
8c:0d:a6:a2:a8:cb:c3:cb:85:fa:2f:16:e3:c8:fa:52:24:df:
50:69:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:03:17 2025 by rpki-client