Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5413d38-364a-32bc-b9aa-5a1b89b73eae.roa
File: f5413d38-364a-32bc-b9aa-5a1b89b73eae.roa (raw, json)
Hash identifier: yUX6XPgocM7QQknj/268a2zVT1R1ALrVbR+zwSXb8/U=
Subject key identifier: 2F:4F:DA:54:43:F8:E9:F5:14:57:6C:4E:26:59:E8:93:5E:C2:93:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD22BBDB38804984457EC6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5413d38-364a-32bc-b9aa-5a1b89b73eae.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:22:bb:db:38:80:49:84:45:7e:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=e9b44f1c-7915-4488-ba63-96b0cf3bd7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:57:bc:c3:ad:a4:13:ff:67:65:e9:83:9b:
dc:ed:db:04:56:3b:d2:0d:fb:e0:62:e6:ad:40:76:
52:04:cb:67:56:9f:10:38:aa:c4:c5:bb:4c:2e:66:
30:19:30:e7:92:17:17:73:cd:b3:ae:ee:65:83:74:
c2:16:b0:a8:4d:aa:0f:9d:b2:6f:17:9b:0c:91:0b:
03:a3:e3:6b:a7:97:10:1f:ed:67:01:8b:ac:d7:db:
9e:f5:88:cd:86:3e:00:93:ce:96:0c:61:85:90:12:
2b:3a:09:14:11:d9:b9:5d:3c:c5:de:bc:e8:17:19:
c2:bd:8b:29:ac:e8:e7:fa:dc:07:1f:52:80:06:d2:
32:e9:54:bb:6b:4d:c4:2b:37:eb:96:01:dd:98:d7:
24:f1:d5:64:75:34:26:40:4a:e3:7c:f6:a2:eb:ff:
ce:4b:23:75:6d:6b:a2:1b:27:62:c6:c8:71:03:b3:
68:9a:13:a5:f4:f3:75:c8:cb:91:5f:a8:b9:0a:f5:
38:ed:8f:f0:48:5a:dc:00:fa:bb:99:35:4e:95:7f:
9c:72:68:33:6f:68:d6:32:3a:71:60:6e:84:14:e9:
38:f1:04:e4:71:b4:78:0a:4b:dc:8c:a6:63:a8:1e:
62:08:42:cf:0c:31:3e:1b:4f:69:aa:a2:e9:b3:f8:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:DA:54:43:F8:E9:F5:14:57:6C:4E:26:59:E8:93:5E:C2:93:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5413d38-364a-32bc-b9aa-5a1b89b73eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1a:8c:95:ab:cb:21:92:3f:78:9c:74:58:5f:55:0d:aa:3b:
37:ac:98:41:3c:0b:c3:d6:39:c7:69:d5:86:c5:3b:9a:f0:c6:
4a:7c:6c:7d:85:55:ab:5a:51:be:7c:18:7f:96:46:d5:82:ba:
78:df:7f:70:64:01:6f:a6:b0:80:ec:ee:5a:8c:d6:1e:e0:d7:
02:7f:02:70:c0:3f:f2:92:9d:8f:bd:08:7c:66:8b:5e:79:d4:
bb:76:99:47:d6:45:38:54:3c:4b:f8:a4:a2:dd:20:24:16:23:
8b:37:15:57:c0:5d:9c:79:f1:66:25:f2:d8:0d:68:7f:52:8a:
0c:85:33:5b:0e:7d:0e:1d:81:79:a1:e6:24:27:2a:1f:64:65:
bf:e7:43:09:e0:34:7b:7f:fd:c1:f6:a8:e2:9a:a4:70:4a:5b:
17:45:b1:e7:43:32:37:63:07:08:0a:d8:70:8c:47:d0:56:b9:
5e:dd:53:9d:1b:df:86:48:41:3b:b8:ee:82:0f:8a:04:f6:56:
b4:71:2d:6b:f7:5d:7d:5f:e7:c0:5e:1c:56:7c:f3:5e:fd:2c:
b5:d7:68:9e:78:a0:94:a7:aa:60:ec:41:15:1e:3f:a0:68:4d:
61:76:44:69:13:06:2d:76:3e:81:71:a1:cf:04:31:28:b6:18:
41:fe:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:47:16 2025 by rpki-client