Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f263e05b-f336-3da6-a2b7-fa3fb7cc67dc.roa
File: f263e05b-f336-3da6-a2b7-fa3fb7cc67dc.roa (raw, json)
Hash identifier: VgQ7ZKhhmCqfRcfmh3JFRT9WGhFMbECH2JkkjhW+8OM=
Subject key identifier: B1:14:2B:9A:AE:F6:77:8E:00:86:6E:7E:D8:8C:56:CF:A6:1E:C3:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAB5EC094BB89806431D4A34A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f263e05b-f336-3da6-a2b7-fa3fb7cc67dc.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:5e:c0:94:bb:89:80:64:31:d4:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=0608028e-4124-499c-a76b-0cc0e5c4d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:f5:0b:e8:8c:53:47:8a:b8:48:a8:84:ea:
28:be:f7:a1:02:a0:b2:58:c8:c3:8e:43:d1:c8:c4:
6c:9c:fb:4f:bd:aa:8b:c6:10:a8:1a:42:09:46:88:
6b:df:a4:5c:d2:eb:38:2d:b1:aa:57:06:1b:ab:99:
ea:c5:44:05:ce:ab:5e:fe:d4:9e:bc:69:63:5f:5f:
4b:8b:d0:8f:64:07:58:d7:d4:f7:3e:37:4c:72:33:
6b:52:06:5a:ac:d8:6b:02:16:44:74:3c:d5:1e:47:
f9:65:f1:6f:0f:9b:34:fe:8b:32:88:d4:36:6d:b1:
d9:ca:e2:56:2c:e8:29:88:1f:ab:1a:31:58:a2:95:
ec:3d:4f:6e:77:f5:77:77:52:98:2c:5a:a6:4f:9d:
7b:e4:91:73:03:7c:de:c8:99:25:3f:27:b0:2b:d8:
c3:5e:58:2b:6f:ae:e1:5a:1d:c3:d1:ee:4f:49:49:
22:d5:9f:a8:20:51:17:0f:1c:f4:3f:49:9c:5f:63:
03:3d:7a:00:f7:26:be:67:a1:c7:bf:87:88:b1:d9:
fd:20:84:5e:0e:11:ee:b0:19:7c:b9:c0:c2:cd:dd:
59:fd:14:3c:11:b4:0a:85:d8:9e:5e:6e:13:c1:5d:
5a:24:62:cf:8f:02:0c:47:f1:c6:56:33:3a:5b:08:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:2B:9A:AE:F6:77:8E:00:86:6E:7E:D8:8C:56:CF:A6:1E:C3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f263e05b-f336-3da6-a2b7-fa3fb7cc67dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:30:7c:d3:39:49:1a:ba:ec:e6:d9:1f:a0:9c:ac:0a:02:1d:
52:51:fa:32:bf:29:09:37:52:fc:85:1a:87:03:5f:b3:48:34:
9e:f6:10:fc:6a:46:a5:3e:36:f7:92:d3:b1:56:5e:07:85:16:
c5:00:02:25:50:28:8f:0c:ef:e6:cd:9e:e1:c1:ed:1d:1d:49:
c7:47:ac:8e:83:1f:80:fa:ba:a9:e5:6d:64:85:04:c4:ef:f5:
42:2d:a6:c8:be:b2:1c:36:6d:42:db:07:ca:a1:9e:fa:1a:80:
cd:f8:e4:ce:fd:8d:0f:52:75:cb:a5:21:ad:5e:b9:11:79:5a:
45:03:d8:75:d1:82:ed:51:82:a8:12:a3:cc:f9:99:52:0f:46:
79:d4:9c:ab:a3:d0:07:9f:29:9d:cd:52:8c:81:c3:01:74:73:
9f:a7:4a:3d:8a:f6:9c:8f:0b:eb:4e:50:1e:37:fc:1c:c5:02:
9d:b6:c1:56:29:d8:a0:9d:1c:54:3c:36:df:57:3c:b2:3b:55:
f3:c6:36:fd:c6:00:36:45:bd:0e:b8:ab:c1:47:e2:85:fe:81:
f2:b9:e9:28:81:c8:ce:4f:bd:1c:c0:0d:55:a6:9a:2a:96:67:
8c:18:16:a9:16:79:cf:a5:31:5c:24:44:ef:f7:29:09:f8:70:
a7:18:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:23 2025 by rpki-client