Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2066e527-1565-3008-904f-86d499465dbd.roa
File: 2066e527-1565-3008-904f-86d499465dbd.roa (raw, json)
Hash identifier: okapy+wUEATd0Cp+D3dSai+bH4m9U0KSaRu0OUt1rs8=
Subject key identifier: 67:0B:F6:E8:C1:F1:94:DD:3E:BC:D0:97:B1:01:A6:78:93:F0:36:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50AD113
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2066e527-1565-3008-904f-86d499465dbd.roa
Signing time: Wed 19 Dec 2018 05:57:59 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=302b1a54-6e46-40d7-bfe8-9dcbb35e3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:44:c1:2b:05:80:d6:38:b7:68:31:6a:46:
5c:0f:2c:1b:dd:06:f4:30:b2:84:7e:6f:65:70:b9:
82:bf:a8:66:21:02:92:fc:9a:a1:85:85:fd:02:cc:
61:2e:7e:36:fc:77:78:71:e8:c5:b1:f4:9e:de:6c:
85:da:13:e1:4d:f5:bb:a9:5e:32:82:ac:8a:80:7c:
9c:9b:38:88:67:54:1b:e3:36:3e:25:cd:99:72:68:
c9:07:b9:b5:95:98:40:da:43:aa:22:ec:96:6b:5d:
a9:8b:54:90:2c:1d:d3:17:9f:f2:97:64:67:f3:77:
94:e5:f2:b8:2c:af:ab:da:7d:05:08:1a:d7:09:fe:
2f:73:fc:29:70:d0:c0:37:d4:71:0d:71:2c:0c:7a:
43:7c:6f:71:1c:8f:a9:5a:ff:53:c9:28:5d:ca:64:
41:4a:f2:87:c5:cb:9d:ac:ad:c8:c0:e3:73:c8:7b:
1c:92:f8:20:a8:63:c3:99:3c:51:fc:95:3b:af:ba:
2a:07:94:49:ce:a5:92:49:35:a1:17:5d:0d:c4:41:
01:ed:eb:51:19:0d:55:88:f9:da:cd:c1:4c:5e:34:
b0:da:df:80:30:cd:d9:9c:eb:6a:ff:6e:cb:96:f1:
17:84:da:09:ee:9b:95:3e:45:5a:2c:bf:4a:50:a6:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:F6:E8:C1:F1:94:DD:3E:BC:D0:97:B1:01:A6:78:93:F0:36:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2066e527-1565-3008-904f-86d499465dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:7e:2b:27:c0:c1:3d:81:a8:7a:9c:d1:be:9c:fc:5c:5e:4a:
e1:e8:97:ce:3b:de:3e:ad:7c:27:41:14:64:85:73:c3:c5:c6:
14:76:5a:cf:93:f6:ff:45:eb:40:58:9c:08:f0:21:da:34:f7:
39:a4:f1:61:07:2c:16:28:4b:a9:b7:5e:b5:19:2b:94:54:12:
68:bb:dc:8b:26:3d:c1:40:c2:49:f0:79:1e:34:fd:aa:d4:30:
42:79:5d:e1:38:20:73:d0:11:9b:7b:2c:07:2c:a9:17:ff:52:
5f:fe:50:0f:82:6d:8f:b5:7c:ce:6b:e6:31:bf:98:c3:ca:23:
ee:6f:72:25:c9:3d:3d:95:7b:1a:4e:ff:44:83:af:67:9c:d8:
5f:3d:db:7d:6d:0a:dd:68:77:37:98:9a:94:43:51:e4:82:0e:
df:ce:f5:e0:7b:4f:cd:e7:4f:60:95:f5:42:e0:be:be:6e:cd:
c0:de:70:49:4d:92:89:38:c2:4a:ab:0b:70:42:18:b3:77:33:
75:1b:1d:87:b3:2b:0c:e1:58:8d:29:21:cc:b6:f1:7b:b3:c3:
2e:5f:29:50:49:52:a8:21:72:c2:3c:49:e5:2f:0f:d6:e6:ba:
f0:4e:4a:e2:da:cd:b9:bc:a6:a1:d8:bd:5b:59:67:08:5a:d6:
eb:51:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:52:50 2025 by rpki-client