Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46b1659-a8b2-375d-8c4b-004599606cc4.roa
File: d46b1659-a8b2-375d-8c4b-004599606cc4.roa (raw, json)
Hash identifier: VyojWR2R2VvmrqC5H0wz2Fwn9EfSUNyZOKhHSpUY0b4=
Subject key identifier: 68:6C:24:EE:9C:B7:82:F4:57:EF:EC:1D:01:61:5A:D7:F7:D5:36:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D76809AF45488DB3808B88400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46b1659-a8b2-375d-8c4b-004599606cc4.roa
Signing time: Mon 04 Apr 2022 04:00:00 +0000
ROA not before: Mon 04 Apr 2022 04:00:00 +0000
ROA not after: Mon 09 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:76:80:9a:f4:54:88:db:38:08:b8:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 4 04:00:00 2022 GMT
Not After : May 9 04:00:00 2022 GMT
Subject: CN=aa7c0e11-4512-400f-b348-0a8372cc949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:96:f5:ed:37:ff:8c:45:8b:7f:70:70:b1:
1e:00:4e:0d:7a:9a:67:02:38:37:fc:08:09:28:66:
f1:91:da:ed:79:49:4a:3a:2e:fa:bb:8d:ea:3f:3a:
46:15:45:74:80:f5:54:65:11:74:ca:c7:e3:49:30:
4e:ec:96:85:02:a8:af:52:36:73:45:b3:cd:c7:a6:
98:c9:2f:01:c2:d9:c4:fe:b9:24:77:ba:f7:cb:86:
e4:74:51:15:cc:aa:0a:99:c8:0e:70:15:b0:ff:ba:
4b:d9:4a:7f:75:28:f6:7e:66:47:b2:fc:a2:b4:af:
76:57:4a:fc:49:be:92:53:a9:3f:32:4a:af:ce:eb:
dd:70:6d:43:01:25:4f:55:76:c2:d0:c2:5b:e3:e4:
22:02:8e:58:d2:45:87:ab:73:dd:5e:e1:da:ca:c7:
6f:cf:aa:8d:79:2d:5d:ab:a6:15:96:52:0e:18:d5:
48:ec:d8:07:13:93:75:a7:a2:43:47:c0:62:dd:f9:
07:bf:f5:1e:ce:cc:57:d7:80:99:14:35:c7:27:a5:
49:3d:f9:84:bd:35:db:a7:cd:49:41:70:29:5b:10:
5d:76:d1:bc:f1:59:e6:76:e2:bf:76:89:7d:99:db:
ee:95:2b:5a:d0:78:20:1e:d0:b4:63:6c:d6:1c:9d:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:24:EE:9C:B7:82:F4:57:EF:EC:1D:01:61:5A:D7:F7:D5:36:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46b1659-a8b2-375d-8c4b-004599606cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:84:24:b3:b8:f9:6a:69:b9:7b:d3:3b:eb:46:f2:77:2b:61:
68:4e:ea:a2:09:05:fa:ad:60:a6:cb:f3:fb:ff:ab:48:ea:a9:
47:23:20:cc:b5:5f:a9:04:a9:a6:b5:04:11:86:2d:4a:66:fe:
d4:17:ad:08:69:b2:db:32:1b:b2:9f:fd:9f:80:9c:c0:2d:43:
06:53:4e:2c:de:bc:42:aa:ac:01:dc:0c:08:00:40:6c:24:7a:
44:da:bd:82:71:92:70:bf:40:32:a7:3c:20:7e:e3:c4:9c:bb:
f4:0f:02:a2:4a:e7:36:ff:c3:8b:89:2d:b8:3f:a8:98:84:34:
30:b6:65:00:ab:59:5a:8a:74:fe:5a:d0:9d:31:51:4e:03:0d:
05:40:5e:c0:88:ff:03:26:03:12:11:94:69:29:46:f6:d1:2c:
a8:ba:96:4e:7b:45:ea:fc:aa:35:5f:29:bd:18:54:df:f6:3c:
2a:b6:aa:89:6d:6d:61:df:3a:1e:a8:7e:41:a6:02:a9:f4:84:
c1:ab:d4:ee:29:c1:d0:e3:11:ae:bd:c9:96:98:cd:37:2e:3d:
7a:80:45:d2:f7:9b:9f:03:61:04:25:07:3c:51:fa:06:d1:60:
49:b5:9d:fd:b0:8f:72:4a:dd:94:75:a9:3a:70:78:73:7f:87:
8c:d8:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:12 2025 by rpki-client