Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7857f3e-76ce-3c71-a24b-4e63fca5735c.roa
File: d7857f3e-76ce-3c71-a24b-4e63fca5735c.roa (raw, json)
Hash identifier: eUKrxoJEFrVGrNkZ8Nyc1QM7PP6SL7mfM6ZGB1E483Y=
Subject key identifier: AA:82:AC:05:3E:50:6A:03:36:38:65:63:F8:0E:D1:63:41:97:FA:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C8BD24AFAD0BC0C37B036AB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7857f3e-76ce-3c71-a24b-4e63fca5735c.roa
Signing time: Mon 10 Jan 2022 05:00:00 +0000
ROA not before: Mon 10 Jan 2022 05:00:00 +0000
ROA not after: Mon 14 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8b:d2:4a:fa:d0:bc:0c:37:b0:36:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 10 05:00:00 2022 GMT
Not After : Feb 14 05:00:00 2022 GMT
Subject: CN=310c8f93-d529-4250-a50a-f79747a58781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:f9:26:47:36:c3:0b:98:76:d5:85:3e:cf:
c9:ba:08:52:94:41:82:73:30:9b:4c:17:d4:b6:06:
48:66:7e:4a:16:b7:d3:60:da:b6:23:6e:a9:0c:08:
ce:e2:0d:18:5f:f6:eb:1a:b0:4a:e3:86:03:24:89:
82:83:29:46:ab:fd:f0:ac:47:b0:c2:81:95:b0:7b:
8e:4b:d4:af:ad:72:60:46:c6:bb:2a:a8:a3:ac:b0:
b8:98:76:35:bc:2e:2d:1c:a1:5e:1c:ec:7a:60:0b:
7a:ed:a9:c6:5b:2a:8e:53:1f:65:8f:42:38:5d:45:
f0:b5:13:7d:c5:d6:b5:42:f1:2d:06:87:6e:77:03:
6f:7d:53:a7:f6:5b:9d:69:44:4c:fc:88:fb:0c:3c:
cf:ba:bc:a6:50:e5:88:cb:fb:7d:d9:34:3d:6d:69:
49:77:d9:38:02:f8:bd:53:65:f7:ec:39:c9:0c:2e:
17:75:ec:56:45:06:79:47:12:59:3a:45:31:38:2f:
8b:6d:8b:62:0c:59:cc:ad:87:ea:20:82:b4:d4:71:
a5:a6:d7:6e:60:4e:d0:d1:95:9c:f9:f2:b0:54:fa:
29:4c:2c:29:cb:b9:84:c6:2c:4e:a7:e8:51:b3:10:
11:f6:26:14:29:34:32:b3:58:10:fb:19:6b:59:60:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:AC:05:3E:50:6A:03:36:38:65:63:F8:0E:D1:63:41:97:FA:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7857f3e-76ce-3c71-a24b-4e63fca5735c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:63:44:ac:55:30:3a:7a:7d:d7:67:93:98:68:9d:39:d3:1c:
55:02:1c:e2:fe:4f:76:11:6a:aa:25:b4:89:9e:a8:7c:08:81:
ee:e2:e5:80:66:8d:26:23:94:33:b5:f4:3a:1c:c8:c6:5e:e4:
8f:51:0b:92:a4:df:00:d3:be:2f:6c:16:65:aa:d1:74:60:a7:
f0:23:18:62:2f:52:e9:27:40:9d:ca:2e:ec:42:99:22:a8:58:
49:56:f6:f7:e7:f4:e7:fe:d6:bb:44:16:e3:04:0b:f3:d4:db:
68:d5:99:5a:f0:ac:75:17:06:b9:3a:01:bf:b6:4f:69:b0:31:
5e:1a:7b:84:44:6a:7f:0e:45:c1:2d:1e:a7:be:29:24:02:a9:
96:d3:78:d5:4d:50:96:71:78:d0:73:47:85:bf:a6:3a:1c:3d:
c8:1a:ab:2c:a1:93:69:cf:69:9f:12:a9:b6:e1:bf:fa:27:ba:
d4:5b:96:69:29:bd:20:0e:62:84:f2:0b:76:c6:0b:5e:ab:1c:
ba:ca:e1:41:70:3c:86:de:b2:a4:b7:a6:7e:f0:95:da:f5:30:
f8:cf:f0:37:52:1b:32:c4:96:f9:92:d7:d5:c3:c2:a3:f8:70:
ee:ed:dc:1d:40:72:ba:8a:5f:a4:eb:48:bb:39:64:43:ee:e6:
dc:6e:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:57:44 2025 by rpki-client