Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a88222d-e739-334c-af10-0f2631ae8fc2.roa
File: 2a88222d-e739-334c-af10-0f2631ae8fc2.roa (raw, json)
Hash identifier: BmwLty9EV8IfsZLeywbCJxVcj/St0jox4o3mkIfyUD8=
Subject key identifier: 99:DF:BC:F6:9B:CF:06:CF:B7:F3:3D:B7:25:24:15:AA:E8:FD:98:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD4BFCA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a88222d-e739-334c-af10-0f2631ae8fc2.roa
Signing time: Wed 10 Oct 2018 07:15:38 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=657877d4-c0d4-48b3-bfe7-e5b9d09b68a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:0b:1f:7f:fe:bd:ae:fb:c3:d9:19:13:85:
78:ef:65:26:f6:6c:4b:e9:fd:77:a4:08:58:08:04:
a6:98:9e:5d:d1:a7:aa:a3:e0:4e:2f:d1:51:d7:63:
ea:df:5b:10:26:f9:7c:37:ed:ba:0f:87:aa:c4:c1:
fc:83:e1:7f:eb:5f:9e:8f:a9:8f:75:4c:93:cb:39:
3c:2c:1c:30:8f:84:bc:09:d7:57:f9:b9:9f:54:9b:
e4:51:db:5b:d4:8d:6a:d8:a5:96:32:01:93:7a:52:
84:50:93:d3:36:bb:2b:92:86:d6:28:9e:b6:a1:72:
24:c2:5f:a9:df:02:5a:9d:ab:e6:54:38:0b:1e:be:
04:90:84:bc:22:c5:7b:3f:05:ce:83:68:7b:d9:a1:
21:c2:eb:c6:35:61:3e:21:41:2b:2a:d3:03:29:db:
99:7b:06:02:47:24:8e:16:6b:e4:a1:db:52:dc:a2:
b1:b2:15:38:81:e7:9e:e1:fe:53:a2:7d:13:b7:38:
17:cd:cf:b2:e3:b0:6e:ec:f5:d1:d8:ac:3e:96:df:
59:c9:64:cf:b9:ea:ff:7f:e3:2f:3e:25:9f:ed:ae:
95:14:5d:05:3d:7f:ac:a4:52:b5:72:77:16:b0:75:
d6:fe:27:f2:49:04:67:03:13:9b:34:75:2c:72:17:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:BC:F6:9B:CF:06:CF:B7:F3:3D:B7:25:24:15:AA:E8:FD:98:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a88222d-e739-334c-af10-0f2631ae8fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ca:28:ee:9c:67:f9:4e:bf:d9:5b:5c:83:60:09:9f:df:6f:
8b:9b:eb:96:3f:1d:01:f4:ef:59:0a:88:e1:ad:f2:85:26:fa:
c5:ed:53:28:85:e5:e7:13:ec:92:6f:aa:2c:98:9b:d4:53:bb:
88:16:9f:08:4a:79:cc:02:25:c4:47:0d:2a:b4:1a:78:cb:47:
37:02:9a:a8:4c:6e:1a:e7:bc:c6:66:32:6b:55:45:b1:c5:8d:
fb:90:3e:37:00:e9:76:f3:2a:f2:06:ee:cb:2b:a6:c7:4d:a4:
e7:3e:77:72:16:34:e8:5f:28:ed:f7:2c:3a:d8:12:8d:7f:1b:
37:ad:f0:53:3e:b5:bc:22:ec:1b:42:89:45:8e:87:0a:95:16:
ce:fd:b6:8b:03:ca:01:76:45:1c:3d:bd:ab:dd:5f:7f:e6:69:
be:ae:db:fe:3d:03:14:1d:de:81:84:4a:65:c9:23:0d:42:ba:
32:d3:13:aa:57:d9:db:84:a9:1e:df:16:01:54:60:bd:ed:81:
ea:fe:38:9c:50:5e:10:27:51:70:05:16:8c:84:55:67:b9:d9:
e2:de:1f:18:d6:1f:5b:a5:d2:48:73:71:e8:f9:e7:f6:62:9c:
22:fa:d9:45:77:cc:b6:03:92:86:23:6e:4f:71:8a:96:98:47:
09:87:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:21:54 2025 by rpki-client