Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63eee0b-1d07-3ed0-acd6-84bba2459465.roa
File: e63eee0b-1d07-3ed0-acd6-84bba2459465.roa (raw, json)
Hash identifier: mO5p1hdVI6I/Bm1bN5GMNThMhEzr2hiaPLWQoC2pFwE=
Subject key identifier: 30:33:9A:14:BB:42:A7:74:51:8C:89:65:C9:3C:C7:15:4F:CE:ED:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A1281A6CFB0D7FBC7B4A880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63eee0b-1d07-3ed0-acd6-84bba2459465.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:12:81:a6:cf:b0:d7:fb:c7:b4:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=c7dcc5ef-c31f-47d7-afd0-87dda8dc124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:f6:87:8b:1d:35:a5:22:c7:ea:3a:dc:4b:
d5:69:21:e8:14:23:f4:51:b9:94:38:1d:04:c4:0d:
28:c7:1b:f7:45:a1:99:fd:25:95:e5:d6:f3:f0:a9:
34:a2:ae:31:f1:1a:38:49:da:13:6e:1f:bd:10:95:
7f:9d:c3:db:99:a8:a5:fb:90:ef:41:6a:44:c0:85:
9b:18:12:ca:df:64:6b:30:97:37:20:ef:7e:ae:a1:
85:5a:4a:5d:88:8e:5c:62:3f:7d:49:a9:19:73:c6:
c9:ba:0c:85:8a:53:07:b1:24:b6:65:cd:53:52:de:
ea:8e:af:6e:a6:7f:61:1e:f2:3e:b4:84:d7:5d:28:
17:a0:9b:ca:63:92:fc:9a:13:f9:12:fb:ee:10:4e:
93:01:68:6e:be:2b:15:21:63:f6:31:a1:32:7d:ae:
cc:39:ee:26:77:a6:7f:79:46:d9:73:a0:58:d5:13:
64:ca:08:ed:36:0f:cd:82:26:52:9f:db:f5:6d:10:
a7:16:cf:40:20:b8:0a:2e:21:94:b7:52:ba:3e:ab:
92:8a:0b:dd:40:46:90:51:6f:aa:5a:13:1c:c6:53:
c5:06:cc:f4:93:b3:3c:e8:97:ba:ce:e3:de:2b:71:
d8:c7:47:2a:6d:0b:a3:68:0e:df:60:ca:e3:8f:ac:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:9A:14:BB:42:A7:74:51:8C:89:65:C9:3C:C7:15:4F:CE:ED:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63eee0b-1d07-3ed0-acd6-84bba2459465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:16:d3:ed:cd:11:a3:7c:6f:26:95:39:33:b7:cc:cd:ec:09:
d8:a7:ef:b3:b2:18:74:f8:9f:e2:4a:2f:d7:64:6a:da:d3:9f:
51:c0:0a:e2:b8:75:4c:ba:0a:9d:14:f8:fd:e7:d8:ca:b2:76:
6f:75:18:5e:77:d3:2e:ae:cf:34:01:67:0b:9d:77:0f:fe:a6:
f8:28:e4:8f:1f:cc:98:6e:79:66:31:51:ba:ad:46:6f:06:f1:
d4:b7:c5:b2:ac:a2:14:da:e5:58:c8:c1:0c:91:be:05:ae:e0:
41:ad:8b:9b:fb:c6:d2:f2:a4:66:ae:35:4d:f2:55:06:22:3e:
fe:52:7b:a8:a9:5a:50:05:a7:e5:f1:28:87:3f:bb:12:69:2a:
6c:63:fe:52:13:a4:09:34:e3:f3:cb:f7:5d:14:aa:b1:9b:6b:
67:33:5a:7f:98:f5:b2:40:1e:30:18:7b:16:67:1a:df:71:c6:
a3:12:86:a6:45:d7:e6:8f:02:64:10:42:bb:e3:ff:57:47:ec:
69:f5:11:68:de:ec:97:94:e7:d7:5a:6a:5a:f2:0d:ff:8b:2a:
a7:61:a9:e0:d9:ed:f0:cb:1d:90:ce:63:27:13:85:cc:a3:3d:
6a:f1:a3:d2:90:e3:d8:28:e0:50:53:db:7e:40:3f:72:50:0d:
0f:2a:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:45 2025 by rpki-client