Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edebaa8f-dbf4-3c21-a941-df62d11b77ce.roa
File: edebaa8f-dbf4-3c21-a941-df62d11b77ce.roa (raw, json)
Hash identifier: Zl3Og8D0ez2BnWuPXSdtYFi41NJd+OYoZd+8AfCvD7M=
Subject key identifier: 86:91:61:39:B7:89:55:2F:4E:DC:6A:E3:D9:6D:2A:72:7C:C1:BC:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32CDF021C0D80DAEEA0A7900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edebaa8f-dbf4-3c21-a941-df62d11b77ce.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:cd:f0:21:c0:d8:0d:ae:ea:0a:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=b9942a11-ebea-4687-a0d0-2035f6b5516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:c1:74:50:73:3c:84:60:f3:56:ff:9e:5f:
13:20:e8:73:64:8b:65:ee:8b:74:75:0a:e3:a7:c6:
2b:dd:db:31:f4:8b:c3:fb:a8:35:20:22:96:2c:0d:
e6:fc:65:59:cc:3d:c4:cd:bb:52:95:08:ef:92:c9:
1c:62:e0:a3:79:45:6f:07:e3:ff:cc:f7:67:70:d1:
a4:e3:e9:47:16:d1:a0:c3:4c:7b:72:d9:a6:39:cd:
4b:38:92:f1:b5:95:0f:50:4d:64:74:4d:81:0f:d7:
9d:f6:61:bd:3a:c0:06:c7:67:e2:c7:82:6d:24:a1:
2b:5d:8b:05:f3:0e:11:b9:cb:c2:2f:97:6e:f8:6b:
86:59:e2:0b:3c:31:f4:cf:29:b9:d7:a7:85:9b:90:
55:f8:be:b4:c4:4a:71:21:70:18:41:a0:82:3e:48:
00:9b:bc:84:a3:5c:ca:f5:ef:d4:7e:db:00:ca:41:
00:a6:0f:3e:71:cd:bc:7d:1f:bb:87:40:d6:31:25:
66:db:f2:b6:a8:7c:26:77:15:16:7a:c9:c3:0f:6a:
79:f1:75:fb:92:40:b1:b0:4d:d0:2f:09:95:94:ae:
f2:2c:1c:c5:7b:6b:83:ba:15:6c:0b:fb:e0:0b:fe:
b2:9b:04:16:d6:ac:2f:b3:08:d0:ce:68:5b:ec:b8:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:61:39:B7:89:55:2F:4E:DC:6A:E3:D9:6D:2A:72:7C:C1:BC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edebaa8f-dbf4-3c21-a941-df62d11b77ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:22:06:85:a1:7a:f1:12:2c:19:51:ba:06:16:41:bd:73:10:
b1:32:9a:27:d5:a6:05:02:05:44:f1:60:4b:d9:9a:00:33:c9:
29:49:84:fd:40:86:21:8d:1e:7f:74:80:9f:7a:e0:44:58:ae:
63:5a:3f:f2:86:e3:d3:0e:98:b6:03:ed:fa:a0:e4:9f:b0:93:
ba:7a:72:0e:59:2b:32:d2:cd:bc:0c:c9:5f:51:2e:0a:07:66:
e8:1e:e6:91:80:06:f0:44:4c:b5:9b:b9:d1:ce:f3:7e:0a:6d:
31:f2:37:9d:e8:4a:67:69:6a:b2:c7:bb:3c:a8:f4:74:f1:30:
fb:aa:a5:39:b4:b2:39:fa:5b:1e:27:5e:1b:0c:41:73:f2:dd:
dc:22:bd:20:b0:f0:0e:09:93:07:68:c5:84:50:d6:b9:45:f4:
a9:f5:4a:78:2c:92:20:fc:e2:10:68:18:27:93:d5:18:45:f5:
20:1d:07:79:c6:20:45:d9:48:79:69:1f:0b:3d:ac:e2:9f:2f:
d4:96:60:47:80:fe:96:cc:a0:3a:fc:4d:2d:89:98:27:72:2f:
5e:81:50:c0:91:7a:e0:a6:73:f7:1f:ec:9a:5c:7b:b5:59:f0:
b7:9c:73:c6:5d:ac:0a:2b:94:91:fb:d6:9b:23:1e:e0:1e:d6:
7e:80:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:21:27 2025 by rpki-client