Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532e2ec-6792-3a27-851d-a70491774576.roa
File: e532e2ec-6792-3a27-851d-a70491774576.roa (raw, json)
Hash identifier: fK8W2+nL+wC5iCFb+3zyFWxgpr7hxJ/lxnm2ML+1g+M=
Subject key identifier: 7F:D4:33:52:6F:6B:54:B0:AD:75:E6:83:D5:AF:6E:56:38:7E:E3:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5962A639FB0A0EFD56664E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532e2ec-6792-3a27-851d-a70491774576.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:62:a6:39:fb:0a:0e:fd:56:66:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=daa37528-7a7a-4447-8841-3fbc2a08b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:be:d8:e9:0c:dd:d4:f1:59:0f:d8:00:43:
b3:4e:9c:30:4b:7c:66:2b:bc:d2:75:13:d9:f0:de:
d9:1e:a5:3c:33:c0:84:18:ee:b0:77:27:7f:9f:52:
a3:51:31:cb:ea:93:67:62:d5:98:75:ee:d2:50:26:
f0:b6:87:b4:46:be:47:33:af:34:bd:cb:4e:86:8b:
f9:80:75:33:1e:98:ed:17:8c:13:9d:9f:df:0f:45:
47:b3:e8:f9:42:a3:25:82:d7:6d:d0:e9:37:f0:c9:
a9:33:a9:42:cc:76:53:ec:52:07:e4:0a:e1:fd:e1:
ff:b5:4d:4e:4b:5c:13:91:12:45:cf:78:2b:31:06:
48:21:5e:c3:64:bc:1e:de:00:07:a3:95:e8:cd:8b:
ee:86:e2:11:a9:f9:e5:99:be:ee:14:f0:01:74:85:
10:a4:f3:65:fb:6f:c9:bd:19:7a:1d:8c:56:b4:24:
d6:ce:88:9e:fc:02:76:9c:ad:52:62:38:a1:b3:79:
73:d8:7f:c4:5b:70:e1:81:10:5d:76:15:13:3f:00:
2d:93:f7:b9:9d:10:d7:d4:36:5a:94:94:8f:d4:f3:
4f:e9:d0:c0:94:e9:57:ae:5a:3b:b2:e6:f6:e4:0f:
76:94:db:30:64:04:e0:5b:05:e5:1e:3e:83:94:b2:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:33:52:6F:6B:54:B0:AD:75:E6:83:D5:AF:6E:56:38:7E:E3:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532e2ec-6792-3a27-851d-a70491774576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:72:21:bd:5d:f1:41:9f:5d:26:6b:5d:7a:5c:ce:dc:71:dc:
9d:ba:92:88:69:fd:21:30:d9:00:63:bb:94:ff:ce:03:d1:ec:
5b:2f:c7:93:a8:a0:31:62:7e:d3:d8:c1:46:2e:bb:5a:88:fc:
60:61:57:0c:44:e3:e8:d6:1e:78:97:59:0b:c7:ee:58:d7:8e:
d4:6e:cd:20:8e:4a:02:ee:2a:76:ef:0d:61:8d:6e:0b:1a:ae:
53:a2:54:a6:54:63:2f:4d:30:81:f8:78:81:47:c1:49:4d:95:
08:20:a5:b5:3d:ec:bf:8e:7e:83:28:d8:f4:6c:5d:16:e8:2e:
36:c6:91:f3:01:90:b6:9f:c8:62:6a:c2:7c:ed:7f:81:a5:ca:
a3:d1:12:9d:b8:1f:c1:dc:b8:cb:ec:c3:10:8c:e3:06:e7:dc:
1f:0e:99:05:5d:dd:a7:21:12:9c:79:33:f1:96:53:37:32:97:
4d:3e:45:5a:e3:cd:72:2d:f7:45:87:d5:f7:9d:a3:c7:82:4e:
52:86:ec:62:ce:0d:54:a6:59:8a:43:51:a2:4d:f2:37:85:c5:
16:78:65:3a:64:1e:31:8a:b9:9f:7c:bd:c3:9c:cf:d2:c4:c9:
c2:7f:5f:aa:ac:be:a4:2e:56:24:3e:e4:ea:d3:c7:3c:e0:c0:
81:28:8c:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9ZYqY5+woO/VZmTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGFhMzc1MjgtN2E3YS00NDQ3LTg4NDEtM2ZiYzJhMDhiNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV++2OkM3dTxWQ/YAEOzTpwwS3xmK7zSdRPZ
8N7ZHqU8M8CEGO6wdyd/n1KjUTHL6pNnYtWYde7SUCbwtoe0Rr5HM680vctOhov5
gHUzHpjtF4wTnZ/fD0VHs+j5QqMlgtdt0Ok38MmpM6lCzHZT7FIH5Arh/eH/tU1O
S1wTkRJFz3grMQZIIV7DZLwe3gAHo5XozYvuhuIRqfnlmb7uFPABdIUQpPNl+2/J
vRl6HYxWtCTWzoie/AJ2nK1SYjihs3lz2H/EW3DhgRBddhUTPwAtk/e5nRDX1DZa
lJSP1PNP6dDAlOlXrlo7sub25A92lNswZATgWwXlHj6DlLKJ3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH/UM1Jva1SwrXXmg9WvblY4fuNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTUzMmUyZWMtNjc5Mi0z
YTI3LTg1MWQtYTcwNDkxNzc0NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAuHIhvV3xQZ9dJmtdelzO3HHcnbqSiGn9ITDZAGO7lP/OA9HsWy/Hk6ig
MWJ+09jBRi67Woj8YGFXDETj6NYeeJdZC8fuWNeO1G7NII5KAu4qdu8NYY1uCxqu
U6JUplRjL00wgfh4gUfBSU2VCCCltT3sv45+gyjY9GxdFuguNsaR8wGQtp/IYmrC
fO1/gaXKo9ESnbgfwdy4y+zDEIzjBufcHw6ZBV3dpyESnHkz8ZZTNzKXTT5FWuPN
ci33RYfV952jx4JOUobsYs4NVKZZikNRok3yN4XFFnhlOmQeMYq5n3y9w5zP0sTJ
wn9fqqy+pC5WJD7k6tPHPODAgSiMIA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:53 2025 by rpki-client