Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30aff8e8-8731-3a64-b996-b6d98a9f0500.roa
File: 30aff8e8-8731-3a64-b996-b6d98a9f0500.roa (raw, json)
Hash identifier: W+UMvBIBAzIwNrxpGZD93q3JhtB85iyDSt13vyPU060=
Subject key identifier: EB:6B:87:24:AC:F4:09:EE:AA:1F:76:29:B0:A0:B1:C7:F9:31:EF:84
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50AAE33
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30aff8e8-8731-3a64-b996-b6d98a9f0500.roa
Signing time: Wed 19 Dec 2018 05:57:50 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d660d4b8-e233-4089-940e-231421f322bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:fc:19:0a:e1:5f:d4:34:22:0e:2b:c5:fc:
20:b2:ef:ad:93:6b:8e:2b:6a:cd:d6:52:03:d5:d6:
45:04:a4:ae:50:3c:40:9a:30:81:f1:e5:67:08:f3:
ed:cd:e3:a4:49:1b:0e:d0:87:a5:c9:77:11:80:82:
94:25:ec:53:49:da:4a:59:f3:d2:4e:47:81:1e:1a:
56:2d:10:70:19:40:8e:a9:45:77:2c:77:5c:5d:64:
83:27:db:40:89:c4:87:94:47:5d:e0:bc:6f:b0:20:
35:11:84:7a:aa:5f:eb:ec:de:c3:13:06:e9:c8:79:
ea:7c:05:23:4a:fb:5e:26:2c:cb:f1:d9:2c:37:7a:
74:58:55:83:9a:8b:a9:d5:fb:7d:4a:8f:bf:fa:c3:
c0:ba:23:ef:7e:7a:ca:33:66:8d:00:66:0c:5b:4d:
4b:4d:a0:e6:44:a4:af:47:b3:db:2c:af:e6:e8:1f:
14:67:d5:57:2b:30:53:90:60:8b:02:16:a7:ab:21:
46:1c:49:5d:07:ca:4e:3f:d4:22:d5:3e:7c:e2:18:
61:85:86:c0:12:15:f2:dc:27:0a:24:a7:66:56:6b:
66:24:91:5f:96:62:41:73:8f:69:0a:51:29:2e:bd:
60:15:e7:d5:12:24:0f:09:10:e8:48:4d:e1:72:f5:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:87:24:AC:F4:09:EE:AA:1F:76:29:B0:A0:B1:C7:F9:31:EF:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30aff8e8-8731-3a64-b996-b6d98a9f0500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:5c:8d:d7:de:b7:01:20:95:b3:69:f5:54:69:04:e4:05:c1:
f3:35:7f:7c:fd:3e:ff:8d:99:76:a9:17:e8:db:3f:50:1a:6c:
96:1b:a2:6c:56:e0:d8:e3:81:ce:3e:ad:66:c0:fb:2f:ba:d9:
db:54:70:0a:c5:7e:2d:b7:a8:5f:aa:b0:b0:c2:51:d2:36:59:
b2:ec:01:cc:45:9b:f2:48:eb:10:a1:27:e1:0c:39:73:ca:9e:
33:69:b3:62:2d:75:9b:b3:2c:c9:d2:bf:de:bf:9f:50:84:8a:
1c:00:52:9e:34:75:35:5a:1a:ed:b6:72:c7:02:9d:7b:25:9e:
48:aa:ef:05:b6:6d:08:96:30:15:dd:72:fd:6c:e0:19:fd:3c:
62:f4:15:ca:a9:41:ce:7e:6a:1c:33:53:78:01:85:88:1d:1b:
55:16:38:d4:06:ee:21:0b:f6:ea:ff:66:35:e2:21:06:0e:98:
36:36:37:4f:c8:80:b1:c6:90:c0:68:8f:d7:29:42:84:10:9c:
03:b6:94:a2:75:5e:3f:48:c2:f0:22:96:7c:81:e3:93:93:ff:
4e:61:61:41:04:07:38:d0:78:3b:c2:da:ec:6c:e3:66:1e:85:
71:6a:1b:15:dd:b5:2f:a6:96:11:64:75:52:37:6f:0b:11:2a:
3d:52:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:45 2025 by rpki-client