Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bcecc7d-ad0d-3045-8354-e16a6c0b022d.roa
File: 2bcecc7d-ad0d-3045-8354-e16a6c0b022d.roa (raw, json)
Hash identifier: ZPXdbIKxGWzpQEuwulo20JHOYjxkzp98X3wQkqO2Nks=
Subject key identifier: 9F:63:A3:BC:D1:B2:D3:4F:A5:DF:E5:27:01:EB:F9:79:46:C4:07:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4920616
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bcecc7d-ad0d-3045-8354-e16a6c0b022d.roa
Signing time: Wed 19 Dec 2018 03:46:03 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=8eb49245-fc43-4270-9b6e-a01ae7a99dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:95:22:4b:3b:ee:45:92:cd:47:70:1e:af:
37:3f:74:3f:98:ff:c7:d9:42:42:67:1c:28:aa:52:
9b:c6:0d:45:9e:4d:3f:d5:2e:76:cc:25:ae:28:db:
49:db:0d:53:4d:a0:35:26:e2:fd:2a:c4:b5:9c:dd:
10:da:c7:8d:4f:62:ca:07:b1:85:f0:e4:d0:1c:26:
66:af:a2:99:f1:b0:d1:7d:1a:b4:4a:24:7a:9f:71:
bd:c3:14:86:99:f4:df:88:81:aa:f3:b2:56:54:43:
1f:d8:0d:f7:71:fb:0d:7c:f9:8b:0a:86:55:4a:93:
df:ad:5a:00:a2:5e:a4:75:ab:04:a6:bb:8e:be:eb:
12:35:ad:fa:42:27:72:35:69:57:60:2b:2e:fe:24:
8b:c3:37:0b:9e:d0:8d:3f:f0:cb:31:76:e6:07:12:
60:94:2f:93:4e:bd:51:66:de:a7:85:46:97:56:b5:
42:c4:fa:ff:8a:51:df:95:a4:01:13:c2:56:60:99:
3b:2b:eb:3e:87:41:5f:51:ac:84:57:50:4f:31:7d:
20:66:81:78:a3:2e:6a:a4:96:1b:86:9a:2e:18:7b:
20:f8:b9:f9:2e:dc:9c:ab:51:ee:9d:94:b6:1a:0c:
0b:77:c5:7a:b5:1d:9b:ce:f1:2c:05:d1:4d:51:5b:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:A3:BC:D1:B2:D3:4F:A5:DF:E5:27:01:EB:F9:79:46:C4:07:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bcecc7d-ad0d-3045-8354-e16a6c0b022d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f2:03:c0:a2:2f:90:23:94:89:6a:c1:bb:0d:b4:72:a9:44:
2d:19:8e:b0:20:32:30:0f:d0:a5:eb:34:70:06:fc:8a:3c:fd:
6e:8b:57:7e:d5:95:bc:d6:e3:b5:88:a9:e0:5c:09:b2:80:b4:
f3:0d:7c:49:52:2b:29:10:e5:5c:2a:04:b2:94:8b:76:01:ee:
61:ee:3c:f2:12:3b:43:0e:55:09:ad:d4:df:95:33:d9:9f:de:
c2:13:d2:19:23:93:d7:6e:6e:cb:c5:2c:24:42:b8:26:5f:de:
df:ae:13:f5:b6:f8:32:90:61:76:43:5c:12:17:df:ff:b0:4f:
c2:f0:66:ac:5f:66:7d:5b:84:a5:24:ce:cc:e6:ad:ed:42:29:
40:af:56:01:e3:95:61:e2:9b:a1:4c:d2:ec:fe:20:c0:c2:b5:
29:fa:ea:17:6d:0f:f0:ab:0a:96:f8:e6:26:88:ba:8b:fb:4a:
48:31:32:58:ae:64:98:6d:41:1f:27:c5:5f:2d:b7:c0:46:83:
12:d0:fe:57:f8:60:ce:6d:23:c3:9f:68:e7:99:71:f4:e8:a4:
7a:af:b7:7d:79:7f:d8:33:32:ca:8d:60:5a:81:35:68:d0:c0:
67:ab:14:34:3e:2a:b5:83:da:c1:b9:a4:7e:42:3a:97:43:ce:
1d:09:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:58 2025 by rpki-client