Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c8ebd3-a6a3-3356-a4a3-b0ee58baf303.roa
File: d5c8ebd3-a6a3-3356-a4a3-b0ee58baf303.roa (raw, json)
Hash identifier: mQZsyWOCP0MRYF+kT/M7vaCF0GFpyNAlybtzuXUlU1I=
Subject key identifier: D5:F0:0C:C3:77:A3:6A:CD:0A:2A:EF:A4:D4:C8:03:E9:13:82:6C:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8107619DA7F7725EFCE54980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c8ebd3-a6a3-3356-a4a3-b0ee58baf303.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:07:61:9d:a7:f7:72:5e:fc:e5:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=daac99e9-cb22-4621-b966-563bfec25b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:8c:12:01:6c:30:5a:b9:3a:74:20:5a:fb:
dd:50:01:0b:60:30:00:1a:87:fc:fc:b9:7e:30:1c:
26:47:a9:69:b0:ca:b5:42:c9:bc:54:cf:be:4d:6c:
15:b6:7d:2b:04:de:45:99:c5:3a:9a:f0:f6:b8:c4:
db:d9:a5:05:a8:76:4b:fb:a7:4c:09:b2:c4:13:fb:
c3:e5:f0:8b:c7:e4:c8:dc:59:b7:c6:74:fb:bf:13:
d0:ae:99:97:8c:6e:cd:f2:73:d4:0c:2c:9e:60:19:
72:4b:52:c3:4d:e2:cf:d3:3a:24:ca:9a:eb:ad:23:
83:be:6f:f0:0d:09:b6:13:b3:e7:67:eb:01:a8:d4:
78:44:9d:50:8b:d7:ff:29:df:50:d5:0d:6d:3e:34:
fc:e3:e1:39:e8:7d:c5:56:92:87:35:b3:27:95:67:
b7:02:99:0e:62:02:40:de:22:02:62:dd:30:60:68:
aa:81:ac:dc:68:bb:4d:bc:d2:e3:b5:92:1a:ab:d4:
55:99:49:a6:20:85:d4:89:22:c4:e0:8e:34:e6:69:
fa:74:8e:2e:f7:92:d8:1b:49:1c:c5:46:b6:8c:4c:
ad:bd:3c:b1:ea:b6:b8:62:21:aa:1e:cd:e6:f2:f5:
f0:5e:49:ee:67:59:8d:5c:13:41:63:e9:65:f6:d8:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:0C:C3:77:A3:6A:CD:0A:2A:EF:A4:D4:C8:03:E9:13:82:6C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c8ebd3-a6a3-3356-a4a3-b0ee58baf303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:26:22:fd:df:c2:d5:ac:7a:cd:2b:bd:62:66:ff:b2:db:5e:
ec:bd:38:e3:d2:7a:23:a9:9b:4a:83:1c:22:97:4d:35:91:2a:
8d:9a:cd:27:2b:e5:a3:01:50:17:e6:2c:6a:c0:72:c9:16:b5:
23:a5:c0:6c:4b:33:8b:75:06:17:4d:96:ac:e7:ff:7f:14:67:
73:44:dc:76:48:43:af:3e:74:11:f1:27:0b:50:48:91:f8:5d:
dd:c3:0a:6c:7f:19:41:7e:d4:30:a8:12:4e:c5:fb:c2:fb:9c:
01:38:bf:1f:86:2f:72:06:a2:7c:b9:12:01:10:54:76:55:41:
c3:5d:4a:6a:04:13:3e:a0:05:69:60:ee:94:c9:d2:bc:4d:ca:
97:35:b2:01:d1:e2:3b:0d:20:9d:e5:d5:ec:b5:11:dc:d1:2f:
1e:ba:03:19:44:87:c6:d9:92:27:fb:fd:d6:9c:52:f2:6a:56:
8f:e3:f7:30:15:4e:ab:c6:ce:ef:79:38:35:eb:34:58:02:bb:
9f:56:01:71:46:c2:dc:66:26:12:c5:34:9b:67:7f:0c:36:f4:
30:b0:b2:bc:27:8f:80:ad:11:6f:76:34:6d:e8:0a:3b:2a:b4:
9e:7a:19:19:22:1b:bf:41:51:dd:b6:4a:6d:bf:a3:e5:94:11:
d7:f3:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:27 2025 by rpki-client