Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2742b352-54c5-3682-bb99-27b9fb757846.roa
File: 2742b352-54c5-3682-bb99-27b9fb757846.roa (raw, json)
Hash identifier: uI2EPp4er+b2MZ0F/8e5jDiK/yIJV7Qvmp0VuKh6brY=
Subject key identifier: DF:F7:A6:56:78:40:3D:92:C2:B0:19:BD:B4:7A:89:43:1B:41:E6:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C46A1E6E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2742b352-54c5-3682-bb99-27b9fb757846.roa
Signing time: Wed 19 Dec 2018 03:02:28 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:6a:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=c54023c6-2336-4735-84af-d516d658efa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:2c:83:39:bb:ed:6d:cb:e8:d7:24:75:d8:
46:43:f0:8d:e2:7e:44:6f:42:a9:f4:d3:ac:ff:43:
b1:e7:e4:e7:1d:eb:7f:19:d4:13:94:79:ac:db:8f:
18:a3:13:96:2f:06:d3:08:94:99:e3:ed:9d:4f:36:
f2:85:b5:61:af:df:2c:5e:4a:03:c7:ea:61:04:da:
39:b1:1b:c9:95:6b:ac:f6:f5:7b:32:5e:d5:d1:2b:
6d:0d:96:b1:59:36:4a:b1:41:ca:4a:9f:8c:9a:f1:
64:79:a3:64:72:3a:c2:b0:de:52:94:78:66:ad:ab:
11:f1:1e:5f:5f:6f:88:d4:f4:9f:d7:21:d9:95:1a:
b8:5e:52:54:f4:5c:49:4a:49:c0:33:fc:34:91:10:
1a:69:b6:07:9c:0e:24:fc:d3:40:3a:17:3a:80:e9:
9e:5f:30:50:00:0e:db:cc:17:c9:4b:63:d0:80:11:
01:33:ad:c3:8d:8d:a7:dd:b8:75:21:33:ef:66:a8:
7f:1e:fd:4d:0b:aa:99:8b:92:6b:97:8e:49:99:26:
e6:97:30:cc:75:75:ea:71:64:92:e1:96:41:42:49:
60:36:00:98:79:13:a1:5d:ff:ec:64:2b:98:a2:87:
af:e0:49:9f:1a:d0:27:fd:f8:46:36:37:0a:01:21:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:A6:56:78:40:3D:92:C2:B0:19:BD:B4:7A:89:43:1B:41:E6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2742b352-54c5-3682-bb99-27b9fb757846.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:4e:1e:d3:95:50:a2:4e:59:bc:ba:24:69:41:96:42:77:56:
d5:73:c3:3d:20:b1:63:17:17:eb:32:61:66:f7:03:ab:f1:f1:
a4:ed:bb:f8:76:7d:e1:11:9c:df:a9:17:84:bc:c1:c1:24:33:
64:a2:3d:23:ee:bf:a5:5b:7c:85:52:30:73:4b:6f:28:ed:0d:
48:de:26:71:61:2a:7a:3e:83:32:3a:e6:3f:22:57:39:44:9c:
66:97:f4:05:17:61:35:76:1d:83:ca:0d:30:9d:34:e8:0c:fe:
73:68:86:12:cb:68:47:b6:c6:ab:ec:a9:ca:f8:71:26:e9:2c:
2c:fc:47:9c:b2:9e:c2:fe:c0:7c:66:70:28:57:0d:01:fd:10:
49:37:dc:bc:d2:20:88:3f:68:99:68:04:99:ef:86:e6:2b:e6:
30:c2:34:ce:72:70:f7:e5:58:14:66:43:8f:09:f7:24:bb:0a:
55:fa:42:72:26:6b:97:f3:9d:25:8f:3a:67:19:d6:67:e4:2a:
42:2e:3b:aa:9e:fa:b4:ac:77:ca:0d:e6:03:0d:8e:75:32:12:
17:05:ad:78:a4:c1:9d:a3:04:f2:9d:22:d0:45:be:23:45:b5:
bf:1a:2e:f1:5f:41:55:e5:26:16:33:30:1f:00:2c:1c:d5:95:
34:b4:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:51:21 2025 by rpki-client