Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a22c2d5-55b4-3092-8047-65889f6e4283.roa
File: 0a22c2d5-55b4-3092-8047-65889f6e4283.roa (raw, json)
Hash identifier: R9YhwTHxJhg+8ICkUWtiZoOkn5fNA/Ry+MU3ircW+m4=
Subject key identifier: 13:97:CE:23:AA:F5:DB:E6:0E:63:7B:51:FF:F2:3D:A0:B9:CC:F8:ED
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50AFBA3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a22c2d5-55b4-3092-8047-65889f6e4283.roa
Signing time: Wed 19 Dec 2018 05:58:10 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=b9c38744-857b-44c6-8db8-4a30ca0de709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:6e:78:f6:69:db:fb:4c:b5:eb:fa:d7:5b:
08:5c:5b:90:68:74:e6:27:b7:0f:bb:bd:75:c7:26:
fa:e0:14:12:47:42:b6:ec:d7:d0:35:3b:4a:98:df:
bb:37:00:de:2d:6c:d2:06:c1:bb:23:51:9d:08:80:
09:d8:b0:e3:e1:e3:d1:87:92:b5:b0:ef:a8:d7:31:
dd:eb:f5:fe:49:62:c1:6d:a0:e4:b0:b8:24:64:2d:
4c:47:75:27:bf:8f:f5:4a:4e:eb:09:51:f4:5f:3f:
00:6f:87:da:0a:27:95:e1:d2:97:48:fa:5b:9f:5d:
e6:d2:54:10:ea:b4:d6:8e:4a:69:36:ee:11:62:45:
aa:24:78:82:6a:5b:02:00:3f:e3:fa:59:06:72:29:
ad:58:55:8b:57:99:71:1f:9e:04:5a:7c:26:0c:88:
8f:c9:33:73:57:5b:55:a9:e2:eb:37:c4:3d:84:57:
51:60:ea:a1:ff:35:12:21:d8:0a:01:41:f6:2c:c3:
6d:83:65:52:5e:db:6a:66:8b:5b:3c:67:87:a0:90:
1f:0f:55:80:e8:ad:20:27:50:3f:60:cf:b4:60:e0:
e1:7f:89:c6:6c:0d:e6:97:75:be:6b:d2:c8:87:39:
5c:71:20:5d:4a:24:1c:19:de:79:f4:86:58:5a:16:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:CE:23:AA:F5:DB:E6:0E:63:7B:51:FF:F2:3D:A0:B9:CC:F8:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a22c2d5-55b4-3092-8047-65889f6e4283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:16:b2:09:4b:91:20:c1:30:15:25:0e:0b:10:06:3c:78:1a:
c1:bb:84:eb:5f:2f:ee:b0:88:e7:6a:82:be:2d:84:82:1a:bf:
00:18:49:00:97:6f:c4:ca:8d:0e:11:32:ae:27:ba:7e:80:e6:
61:84:89:ae:37:1c:41:39:35:eb:7c:45:52:6a:76:d9:f1:25:
b7:a3:60:ac:f4:37:91:64:d1:71:5b:2d:0f:2b:83:90:50:f4:
c0:d4:3f:87:48:16:ba:80:67:e1:1d:5a:8f:84:ec:88:3c:37:
69:95:7e:46:41:a2:4f:3c:6b:8b:37:a8:a2:b9:59:b4:1c:f3:
17:47:8d:b0:b3:0b:83:c0:e9:45:4d:c9:e5:75:14:37:90:ff:
8c:e1:d0:28:36:d2:ab:fc:e8:84:c6:c1:ea:a9:f9:1d:ec:62:
0f:fb:b3:04:dd:c3:4d:bf:8c:ab:c1:b9:6f:73:e6:f2:16:b1:
09:3c:46:07:a8:09:79:eb:45:25:c7:44:4e:91:05:0c:cc:f3:
02:c8:90:cd:26:ca:c4:d7:13:09:ca:de:1b:4c:9c:78:16:0e:
27:b9:57:12:e7:2e:dd:5c:15:28:f0:6a:b2:bf:94:0a:f7:1a:
45:96:db:1a:cf:b0:ad:d7:14:f1:9d:da:72:74:c3:0c:e6:8e:
d8:95:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:18 2025 by rpki-client