Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03e9eac2-7097-338b-b7ce-728ffefe6c16.roa
File: 03e9eac2-7097-338b-b7ce-728ffefe6c16.roa (raw, json)
Hash identifier: zGdiTeHp/DMznIFONG+qSt+Tbtc3gWM5jf/N88XrzVA=
Subject key identifier: 99:44:69:19:AF:39:31:5D:76:3B:D6:7D:0E:65:B0:7C:D8:61:01:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50A7BBF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03e9eac2-7097-338b-b7ce-728ffefe6c16.roa
Signing time: Wed 19 Dec 2018 05:57:37 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=e0d58fd2-dc90-4374-a1fb-4535b1590665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:b3:5c:ab:6d:0f:0f:ef:40:6f:58:58:a0:
6e:b7:cb:77:7a:b0:09:d8:05:01:21:a8:dd:cc:1e:
45:92:52:20:bc:5e:51:66:84:78:0f:dc:a5:74:92:
a5:8d:2d:f4:45:b7:86:cf:36:eb:1d:35:20:5c:6e:
1b:62:84:c1:d6:6f:01:b6:05:63:de:c7:2f:16:cb:
a8:1a:07:3c:89:8a:6e:93:6a:e2:8a:f2:33:df:4e:
93:b8:be:f4:b7:97:be:f5:96:1d:b2:09:d9:97:2f:
21:99:46:bf:63:0b:c3:59:9a:f4:eb:24:90:cc:85:
6d:f5:77:ff:b6:bb:ee:24:cf:0e:f5:54:28:9a:85:
9a:6d:ba:5b:47:b9:d1:c3:85:47:5f:e9:75:41:d0:
32:27:fb:d1:46:22:50:51:51:92:dd:95:a4:3f:c1:
ac:22:e0:cd:fe:78:08:1a:33:1a:b9:d6:c7:99:d5:
af:95:50:d2:ff:1e:37:fd:68:28:3a:51:eb:2d:18:
dc:97:28:dc:0a:a3:da:43:8b:cb:77:cd:1b:2a:40:
c7:89:48:b8:b3:2f:7a:3f:c2:be:c2:ec:05:cc:ed:
73:0d:62:0b:a5:28:b2:13:83:51:5c:f8:b6:02:e9:
49:10:6b:c5:e8:cf:16:93:2c:6c:ef:d6:ab:8e:c9:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:69:19:AF:39:31:5D:76:3B:D6:7D:0E:65:B0:7C:D8:61:01:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03e9eac2-7097-338b-b7ce-728ffefe6c16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:45:3f:8e:9f:a9:e3:f7:b2:7d:59:28:d6:1e:1d:3f:1c:3f:
47:3e:da:17:08:d7:45:0f:dd:f7:02:aa:64:0d:7c:cc:73:ee:
11:0c:ef:eb:6b:34:d3:f2:b3:d0:39:e3:fc:aa:3f:ef:18:37:
44:7a:f0:87:22:de:34:b1:cb:23:a4:d9:21:64:5d:4b:d7:dd:
8d:81:f4:90:42:5d:4b:c5:5e:9b:41:08:82:ec:24:03:f5:fb:
6c:96:a0:07:5c:2f:14:0a:75:b3:47:d0:a3:b9:39:05:47:6c:
d2:db:9f:c3:e4:d3:25:e6:00:03:2e:8c:be:0a:f2:9a:68:cc:
73:f2:38:e3:af:ea:4a:92:ee:d3:1e:75:21:bb:97:a6:b7:2b:
7c:b9:b0:bf:80:8b:49:73:ce:58:b2:a4:72:77:ef:2c:a6:df:
3e:e4:f0:6c:d8:f3:02:d5:e4:95:a2:b0:68:a8:87:d0:5c:ae:
0c:28:cf:0c:39:21:e7:af:28:be:89:ca:df:d1:62:05:7a:a5:
84:6c:f7:fe:1d:c5:35:38:22:53:20:54:25:10:ee:83:0f:dc:
8b:60:c0:49:f1:99:d2:94:c6:6f:06:21:1d:65:5f:20:ee:7d:
c4:51:b0:05:f0:d6:93:9d:15:3b:6f:38:49:1d:d1:ae:af:dd:
fd:68:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:11 2025 by rpki-client