Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13b1ba2b-8a4c-3947-a9c7-15a59be1ffd6.roa
File: 13b1ba2b-8a4c-3947-a9c7-15a59be1ffd6.roa (raw, json)
Hash identifier: rP/BXe/xSL1dFugNp+t/FOp9C7qwRmyhENlhqLlTtdU=
Subject key identifier: 27:73:4E:D7:55:E9:AE:D7:B4:6D:13:4A:2E:D1:6E:3A:2D:B4:1F:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3ADD5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13b1ba2b-8a4c-3947-a9c7-15a59be1ffd6.roa
Signing time: Sun 21 Oct 2018 08:17:52 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:ad:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=4972bacd-57b6-404f-9bf2-ca574fc52135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:25:7e:ba:f1:b9:9d:1f:1b:07:e6:77:bc:
d1:7a:ce:3c:66:d2:52:f2:d0:bc:bf:81:45:72:99:
46:b2:7d:61:81:24:a2:42:be:2e:ff:53:8d:14:53:
a8:0b:bd:e0:4b:b7:ee:5b:9c:46:b1:6a:dd:13:a4:
0d:f1:49:37:4c:47:32:b6:7e:a6:e6:f1:05:97:3e:
0b:3d:e8:f2:ab:06:db:d0:1e:8f:27:72:e7:71:9f:
65:8c:3c:8e:dd:93:49:63:74:8e:6e:4c:b1:8d:25:
43:60:82:4e:b0:b6:2b:63:ae:55:8d:30:a2:bd:8a:
fb:49:44:04:50:86:dc:f0:29:63:94:2b:28:87:20:
eb:df:9d:c5:65:74:a3:7f:81:a3:20:be:27:d5:9a:
3c:4c:0e:29:2d:71:c2:75:35:59:97:58:56:3b:5f:
b1:2a:1b:d6:f2:b0:f8:ff:ef:6c:d5:a7:8b:78:b3:
06:1f:a4:cb:c9:f5:3e:e5:49:fc:a5:47:fa:60:63:
de:48:cf:8b:fd:cc:13:bd:ad:94:d4:d3:dc:67:7d:
74:32:fa:58:62:ef:80:cc:a4:58:28:fa:ec:97:dd:
53:7e:f8:d5:34:db:28:97:c9:53:25:e6:d0:a6:86:
a3:89:83:71:ac:5e:1d:f3:0c:82:66:17:f0:a4:5d:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:4E:D7:55:E9:AE:D7:B4:6D:13:4A:2E:D1:6E:3A:2D:B4:1F:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13b1ba2b-8a4c-3947-a9c7-15a59be1ffd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:cc:84:e1:1c:50:4c:48:4d:40:95:10:83:e4:9b:97:de:af:
b9:db:0e:88:f2:8b:48:57:00:02:e7:96:c4:b4:1c:23:2c:19:
2c:02:87:92:75:6e:07:71:05:14:7d:01:96:17:c0:b2:56:24:
fe:9f:74:95:31:e1:46:7d:cf:f7:4c:c2:05:a6:fb:98:e4:13:
d0:f5:96:ed:d7:92:67:22:3f:d6:f3:42:1b:d7:8e:24:3f:35:
6f:77:88:37:4e:6d:cf:9d:89:93:3f:42:f0:f8:e0:21:3a:ae:
3e:4e:18:3a:a2:02:67:a3:4a:af:2a:c8:7f:6a:82:cb:d1:83:
cb:52:58:e3:20:7c:88:45:66:4a:91:b0:8c:69:6e:85:fc:a6:
a9:8d:cb:f7:68:1a:c8:9a:24:ca:be:b9:81:f8:bf:1e:c7:7f:
d7:aa:e6:09:6a:b0:38:15:5c:dc:89:16:eb:93:e0:80:2f:d3:
a9:3e:a4:cf:59:18:c0:2a:90:b2:af:57:a2:30:bd:e5:0f:cb:
0e:68:f3:da:54:16:ee:44:d0:ed:21:2b:ed:23:6d:a0:ff:aa:
53:1a:53:45:79:46:05:bf:50:38:c7:e7:13:da:4c:14:a7:0f:
87:a5:47:86:cf:b6:50:d4:b9:28:10:b8:23:ba:ab:60:c3:0e:
b9:19:00:87
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWzrdUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDQ5
NzJiYWNkLTU3YjYtNDA0Zi05YmYyLWNhNTc0ZmM1MjEzNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM/nJX668bmdHxsH5ne80XrOPGbSUvLQvL+BRXKZ
RrJ9YYEkokK+Lv9TjRRTqAu94Eu37lucRrFq3ROkDfFJN0xHMrZ+pubxBZc+Cz3o
8qsG29Aejydy53GfZYw8jt2TSWN0jm5MsY0lQ2CCTrC2K2OuVY0wor2K+0lEBFCG
3PApY5QrKIcg69+dxWV0o3+BoyC+J9WaPEwOKS1xwnU1WZdYVjtfsSob1vKw+P/v
bNWni3izBh+ky8n1PuVJ/KVH+mBj3kjPi/3ME72tlNTT3Gd9dDL6WGLvgMykWCj6
7JfdU3741TTbKJfJUyXm0KaGo4mDcaxeHfMMgmYX8KRdJKsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQnc07XVemu17RtE0ou0W46LbQfZjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzEzYjFiYTJiLThhNGMtMzk0
Ny1hOWM3LTE1YTU5YmUxZmZkNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjTbBDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEASMyE4RxQTEhNQJUQg+Sbl96vudsOiPKLSFcAAueWxLQcIywZLAKHknVuB3EF
FH0BlhfAslYk/p90lTHhRn3P90zCBab7mOQT0PWW7deSZyI/1vNCG9eOJD81b3eI
N05tz52Jkz9C8PjgITquPk4YOqICZ6NKryrIf2qCy9GDy1JY4yB8iEVmSpGwjGlu
hfymqY3L92gayJokyr65gfi/Hsd/16rmCWqwOBVc3IkW65PggC/TqT6kz1kYwCqQ
sq9XojC95Q/LDmjz2lQW7kTQ7SEr7SNtoP+qUxpTRXlGBb9QOMfnE9pMFKcPh6VH
hs+2UNS5KBC4I7qrYMMOuRkAhw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:53 2025 by rpki-client