Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1daad87-6755-367b-b10e-916443f7735b.roa
File: e1daad87-6755-367b-b10e-916443f7735b.roa (raw, json)
Hash identifier: 6J5aCUiLdyk1MjCcFAO6/IXI13HNFUGJ3tBQgSGQNgQ=
Subject key identifier: 2A:F7:45:29:DA:01:65:A3:AF:69:AE:39:78:F8:75:04:AD:5D:F1:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401DFFC4F2D44459A79CCABA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1daad87-6755-367b-b10e-916443f7735b.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:ff:c4:f2:d4:44:59:a7:9c:ca:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=278394ed-b224-48e6-8d62-076a6aebbbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:cd:30:c2:5b:67:f4:d9:95:b7:5c:f9:94:
58:5c:4d:c4:b5:70:be:d1:76:eb:22:78:0e:60:f1:
0c:58:a0:92:0b:c9:ea:36:7b:4d:2e:07:06:d8:f9:
dd:0d:f7:88:41:e0:ab:2e:6b:02:1c:bf:f0:5b:87:
74:dd:84:36:89:52:81:b9:be:3d:f2:f4:6d:6d:ca:
ac:17:b9:c4:ae:9a:2f:37:2a:7b:cf:c5:b3:bc:40:
2f:cc:61:69:ab:7f:5c:1b:80:d5:55:3e:4d:f4:c3:
02:ed:c9:93:67:4f:46:69:31:f6:48:4d:93:ee:d3:
ba:fa:ed:86:a4:61:77:57:3b:82:a7:f0:3d:52:7b:
01:6e:c3:f4:14:d1:97:21:87:ef:04:d3:63:9e:d1:
2b:45:7e:26:29:11:e7:7e:c3:7f:e2:ee:2b:6f:d5:
fd:a9:dc:a0:77:a0:f2:8d:50:0c:70:1b:ca:68:2d:
3d:13:ab:39:6a:2e:6f:8b:6d:d8:9f:3c:9c:02:2e:
ef:18:85:34:14:b6:e3:80:ad:d0:05:24:68:df:ad:
69:aa:c5:e5:d8:a8:2d:b9:ad:a6:5a:ff:53:ee:b9:
d8:2d:7d:23:25:df:ac:a3:c8:bb:f7:44:c4:0d:d5:
09:6c:24:fb:f3:af:86:f8:75:d7:2b:a8:ca:73:43:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:45:29:DA:01:65:A3:AF:69:AE:39:78:F8:75:04:AD:5D:F1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1daad87-6755-367b-b10e-916443f7735b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:db:2f:43:29:4b:90:7b:7b:11:6f:63:a8:95:f9:86:c1:81:
a5:eb:bb:ed:3c:5b:cc:7c:35:01:a2:ee:68:e8:0d:16:63:d6:
54:6d:18:4f:a5:e7:15:47:78:82:fc:f4:9c:a2:2c:c4:7e:1a:
4b:26:5f:cd:d1:d9:12:e1:91:68:01:32:49:41:da:5d:f0:8d:
3b:e1:78:81:ae:2c:2b:fc:bc:2a:eb:68:b8:1e:b7:8b:59:a0:
7e:80:48:f7:45:64:88:81:12:bc:d3:ae:e2:3a:f9:76:a0:36:
7b:1b:d0:7a:c8:f5:c0:69:67:62:29:7e:f2:53:8e:43:a8:5c:
ed:ab:d3:fd:5c:54:b3:99:d2:89:fd:08:c4:50:f4:5e:0d:4c:
b8:5c:29:0a:30:97:f0:f3:b4:6f:fd:21:52:6a:8d:2d:77:1b:
7c:35:20:c2:a3:a4:de:67:42:ad:6c:8f:c5:82:f4:8f:cc:80:
ea:e5:8b:34:53:d4:c7:9e:56:f4:80:ca:7d:12:e7:b4:7e:c6:
3e:d3:87:e5:9d:eb:1c:9c:73:3d:c9:8d:63:19:bb:c7:ce:24:
00:b0:19:c6:7d:4b:a2:de:b3:1c:f5:f9:07:a4:91:61:be:93:
ee:09:65:44:6a:30:9d:f5:ec:dd:64:3c:fc:24:56:a3:b0:a5:
93:c7:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:54 2025 by rpki-client