Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8870caa-f3a5-3767-aa63-ee8de4b50d49.roa
File: d8870caa-f3a5-3767-aa63-ee8de4b50d49.roa (raw, json)
Hash identifier: iWQozY3hjv2VwzQpZNAM+H0UuCjcKCRS4pd2+F54lYQ=
Subject key identifier: F8:A2:8F:5C:39:19:A6:0A:15:88:0A:05:DD:B5:C1:D4:77:E1:77:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BBF656CC4D2C28724015F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8870caa-f3a5-3767-aa63-ee8de4b50d49.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:bf:65:6c:c4:d2:c2:87:24:01:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=aa57a51e-712e-42a9-91f1-b652d5e8ae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:7e:41:f4:09:0d:d9:60:86:3e:36:46:60:
0a:a5:32:38:c1:95:5d:e9:9b:cd:59:5b:c5:bc:26:
7a:66:4a:98:c3:9e:6b:4f:ea:f1:5d:52:41:01:28:
06:be:9d:d1:7b:d7:53:45:5e:41:c5:9b:09:fc:6f:
35:f8:be:5d:a2:4e:96:65:62:88:7c:98:b6:66:9e:
b2:db:45:4c:53:6e:54:23:55:8b:75:f6:3c:e0:1b:
ba:56:11:67:97:86:5b:3f:7b:db:c3:68:c9:a7:a0:
58:9e:7e:46:f8:ce:66:5e:77:53:3a:1c:ab:1c:ed:
1e:76:4c:8d:2d:d5:03:c5:6f:47:94:4d:fe:a1:ae:
40:52:0d:a2:ed:ce:43:0c:27:7d:c6:3a:c1:a4:cb:
e2:03:3b:74:d7:25:62:04:aa:75:01:04:0a:b9:65:
7b:8c:13:4f:73:bb:60:9b:64:44:e8:e9:c0:ad:1a:
b9:bd:53:35:41:52:c8:2b:72:1b:a1:b4:b0:0d:d1:
de:ba:2f:c3:ab:91:bf:29:34:84:e9:55:78:ad:85:
43:92:01:3a:b8:6b:19:1f:9f:2d:e5:66:3a:b9:b8:
7c:98:5a:51:86:b6:75:4f:b4:43:67:67:ff:a4:54:
6e:e6:cc:65:e6:a5:b1:f2:18:97:ac:69:41:9f:41:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A2:8F:5C:39:19:A6:0A:15:88:0A:05:DD:B5:C1:D4:77:E1:77:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8870caa-f3a5-3767-aa63-ee8de4b50d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:bd:ab:8a:4a:78:ef:20:77:78:30:82:49:f3:8b:02:44:29:
23:7c:91:d8:ca:e5:c9:49:25:1a:bd:48:65:26:81:f0:e4:fa:
72:cc:9a:02:36:0d:63:ac:af:17:fa:35:9e:0d:da:81:38:01:
d2:27:fd:9e:9d:e4:dc:bf:77:a6:ee:50:94:e3:ef:36:32:a0:
a0:27:97:ff:59:51:10:eb:84:e8:fb:b7:8c:c0:0c:81:7a:c6:
cb:5e:ce:a4:46:7d:59:57:9e:90:70:fa:c3:80:ef:c0:56:93:
13:fe:c8:e6:e0:57:b6:e3:0e:bd:7a:46:25:37:8b:04:13:98:
db:d0:1e:ae:59:0a:55:7e:67:6f:17:19:73:13:5a:8a:01:8e:
ee:42:4b:59:af:e7:f7:39:4d:97:e3:83:59:7b:b5:ce:4a:61:
f8:f4:07:16:95:c4:84:ec:52:1a:c1:49:17:e1:62:41:3a:50:
aa:0b:00:1d:89:bb:a7:3b:ba:3e:13:dd:d7:94:05:73:d0:58:
09:53:2e:39:33:87:a9:8f:fb:ef:b6:14:c3:98:5e:2a:99:fa:
59:d8:d4:e8:df:20:61:04:aa:e2:b0:0a:a7:37:76:73:86:80:
26:56:7e:83:00:7e:7f:e8:66:8e:9f:2b:58:d3:bd:31:b2:e8:
e7:86:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:00 2025 by rpki-client