Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4008a9a6-5c88-37f8-adf7-e9a4152ba337.roa
File: 4008a9a6-5c88-37f8-adf7-e9a4152ba337.roa (raw, json)
Hash identifier: P9rTCtxflJmRzI9QR0a9ZXlyp2RnHWQlkptZKxIw3kQ=
Subject key identifier: 9F:08:2A:E2:CE:FA:4E:70:52:23:6E:D8:D4:F1:3E:0C:C9:C6:7F:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50A0609
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4008a9a6-5c88-37f8-adf7-e9a4152ba337.roa
Signing time: Wed 19 Dec 2018 05:57:07 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.92.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=e8a93279-e19d-42c8-80c1-ea2cbaf85f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:87:aa:ce:c0:11:8b:94:fd:4b:b5:83:1e:
85:19:46:49:7f:53:e4:13:f2:bc:1e:21:da:7f:e9:
a2:66:87:e3:5c:42:4d:32:0b:3a:63:6d:82:91:60:
cd:b8:c1:29:ed:95:81:f9:a9:74:93:59:26:35:6e:
83:30:77:78:74:61:ea:e8:98:de:5e:0b:e0:77:dd:
96:9b:a2:c6:06:03:a6:01:df:b5:86:65:f6:82:8e:
7b:c3:8e:d3:35:16:88:a9:76:ea:76:55:8f:df:98:
78:ac:91:ce:c7:0c:d7:56:12:a2:3b:7f:d9:09:1c:
c3:b0:6d:34:c6:a1:58:83:49:0e:4c:d1:3c:f9:cb:
ad:78:b5:ea:d5:72:1b:59:8d:7a:f4:f0:f2:c9:fd:
c2:4f:7f:f2:c9:7a:2c:37:e9:cf:ed:01:22:a0:37:
2d:b3:75:02:ec:fe:30:ed:25:70:43:00:3f:dd:71:
82:60:6f:c9:0a:4c:ec:c8:5e:b0:d4:d2:30:92:8e:
4e:bf:d8:16:d4:41:2f:c4:03:d6:20:4f:ad:a4:f2:
f7:20:0b:3c:af:56:a9:cc:dd:df:a9:67:8a:d2:e2:
12:36:1c:11:f2:e5:00:d4:48:99:2a:3e:63:18:a5:
2e:2d:31:2d:4d:27:0c:af:e2:63:dc:85:f0:60:a2:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:08:2A:E2:CE:FA:4E:70:52:23:6E:D8:D4:F1:3E:0C:C9:C6:7F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4008a9a6-5c88-37f8-adf7-e9a4152ba337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.92.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:05:6a:c6:9c:c8:20:17:89:f3:c6:fd:12:76:7b:d3:ad:9d:
50:e1:d9:a0:2b:9e:4e:af:e5:65:37:3c:92:d5:ac:7a:98:a9:
60:74:57:dc:6e:1e:b1:f9:a4:ac:dd:7e:00:a6:dc:63:3d:c4:
a2:9c:2e:e4:6a:fe:e8:31:2e:5c:9c:95:c0:7b:50:68:53:8d:
c7:01:b6:f7:07:d2:c1:a7:9c:5f:6b:d7:85:a3:15:77:2b:30:
d9:cc:ca:50:30:a5:f3:3d:d5:14:a2:61:0a:da:5a:be:5f:88:
65:47:9d:06:76:c7:4e:59:4f:c3:00:90:d6:e9:3b:cc:41:44:
16:04:ce:d4:9b:b4:88:83:5e:63:5d:7e:aa:6d:45:42:1a:01:
d2:4e:96:55:30:27:ac:e6:37:1b:6f:1e:38:f2:0b:3d:7b:97:
ec:af:a6:18:61:19:db:ae:f8:97:c3:79:c0:58:80:81:cd:53:
53:4e:b6:2b:46:ad:78:8c:79:3d:9d:f3:3f:11:bb:54:af:2d:
03:75:a9:da:24:b7:e3:fb:66:05:1e:23:69:e2:1b:4f:24:7d:
5a:01:05:de:9d:52:2c:6d:20:55:07:4c:de:0d:a5:4f:56:c4:
01:8c:6f:b5:cc:ae:73:56:59:34:bc:7d:73:fc:2c:73:3f:dc:
4e:29:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:42 2025 by rpki-client