Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdb164aa-d591-3794-ad61-76cf0450249c.roa
File: fdb164aa-d591-3794-ad61-76cf0450249c.roa (raw, json)
Hash identifier: 0Ai/psNTa0ayVy1v+1g8yQh0rgbPAot1djR2fAURT5k=
Subject key identifier: 2C:8A:AF:A9:7D:58:0C:26:EE:08:C5:9A:84:24:91:B9:71:44:14:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F838D1BBCEB734C7B165BA528
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdb164aa-d591-3794-ad61-76cf0450249c.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:8d:1b:bc:eb:73:4c:7b:16:5b:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=28e99088-cd9f-441e-8967-ec2d1aa6fa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:2a:c0:b4:3e:c3:a0:22:6c:ba:30:78:53:
6d:47:ba:d5:97:22:ef:b5:8b:f6:8b:53:65:b8:fe:
aa:c0:9b:fd:7a:12:a1:2d:72:69:61:c3:fb:b6:81:
b6:41:a0:35:f8:87:e3:4e:a1:e4:23:4d:ca:82:65:
68:63:5d:db:bd:24:78:9c:c3:b0:fb:83:ca:df:cf:
fd:9f:a8:ce:20:25:d4:f8:f4:66:6d:fc:d6:19:32:
76:2a:61:3e:df:5a:bd:19:12:5d:f7:d2:d0:c4:a1:
b9:43:91:60:55:ff:5c:5e:0a:0e:95:51:34:cd:f7:
e2:73:44:e9:c5:fa:a9:f2:22:cb:65:c1:45:59:7e:
51:f7:cb:aa:13:91:bd:53:f7:54:4b:ba:c1:48:46:
6a:7f:c7:e2:ed:7f:c2:c7:5d:0f:eb:d3:91:74:02:
9d:41:a7:00:f8:a1:49:71:a4:75:64:53:14:0d:78:
d9:dd:ce:64:5a:78:4d:40:98:79:31:70:54:96:65:
01:cc:77:05:97:33:27:61:3c:a7:31:b6:98:8f:ed:
21:24:7a:b1:a9:e6:ca:d9:c6:6b:3b:56:3b:86:64:
37:bd:8c:19:f8:34:a5:77:f5:fa:69:13:ff:54:ed:
83:f8:65:a8:7a:1c:b5:85:7a:ef:33:43:ab:97:85:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:AF:A9:7D:58:0C:26:EE:08:C5:9A:84:24:91:B9:71:44:14:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdb164aa-d591-3794-ad61-76cf0450249c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:61:20:bc:8b:01:84:6b:4c:3d:1b:1c:bb:9e:75:85:8a:4c:
ab:5a:a1:44:3f:07:34:c7:b6:91:9e:52:e8:d8:14:ee:a0:27:
0d:f0:3d:13:40:c6:84:02:d9:e3:16:23:45:54:24:57:7c:f0:
a8:65:f9:1e:63:5a:32:bf:34:f6:17:0a:bd:08:b1:e1:8b:f3:
3b:0f:15:27:06:38:64:dc:c1:3b:b5:3b:0c:cb:a2:91:d7:84:
31:7e:0a:1f:32:af:6b:53:1e:df:d1:3e:86:ab:28:a4:10:56:
26:6f:82:1d:9e:9a:8a:de:54:dd:be:9e:56:89:3b:1e:90:fc:
66:04:9a:4b:b7:9f:6c:5a:9b:cb:22:bb:52:41:ef:cb:95:b3:
2d:62:08:68:e5:6e:f9:63:e3:3f:27:80:1a:86:88:14:ac:45:
a4:90:c4:dd:64:ce:9e:54:b1:7d:51:8b:fc:ec:b8:f1:a4:4a:
3a:a6:91:8d:79:06:31:40:8f:cf:5e:80:4b:5f:f0:fc:7e:22:
de:ca:3d:5e:2b:e7:68:6a:1d:f2:7e:b4:d2:7b:28:23:20:42:
71:58:67:6d:ea:68:53:64:c8:40:0e:81:0c:75:a9:0d:60:2b:
24:a3:f2:d4:0a:f3:c7:dc:51:64:6c:9d:57:39:8f:c7:19:02:
ec:19:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:24 2025 by rpki-client