Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41e0f6bb-bd47-3256-97f6-98aeb4ee78a5.roa
File: 41e0f6bb-bd47-3256-97f6-98aeb4ee78a5.roa (raw, json)
Hash identifier: aaNliSFOqA7wwVdzuaAes8oR55K3/eD3/m9QB8rC2Bo=
Subject key identifier: E3:69:20:64:AC:6E:75:1F:A4:66:BC:72:54:4D:65:BD:23:7F:A0:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50A7240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41e0f6bb-bd47-3256-97f6-98aeb4ee78a5.roa
Signing time: Wed 19 Dec 2018 05:57:35 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=34018020-ae0f-4ad0-af16-871dd76f8b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:b9:95:f8:ca:29:54:b3:e6:24:d9:c2:17:
ea:7d:7b:17:51:6a:12:ca:94:dc:a7:7d:35:bf:21:
0f:dd:50:c4:5c:73:87:c9:e3:f7:aa:a3:ad:ac:7c:
ed:cb:f0:0f:db:4c:54:fc:b6:16:ae:0a:9e:19:b9:
95:8a:10:3e:d4:0c:a8:e4:c1:04:b1:ea:5e:6f:6a:
0b:a8:41:84:76:eb:49:4d:eb:0e:d3:61:8a:59:99:
df:70:0c:cc:ef:88:2e:a0:ae:77:ed:a3:46:f5:73:
97:de:c4:a3:1b:c7:78:95:ac:76:ef:1e:15:6d:32:
52:b4:0a:3d:ed:a9:a6:4d:2b:00:21:04:29:07:ee:
31:47:76:fc:ef:ee:40:c5:a2:18:4d:e5:b4:11:8e:
ae:6f:b6:48:b9:5e:27:55:57:41:40:9d:81:47:9f:
cc:fb:58:06:5b:31:23:46:99:1f:10:b7:c1:e2:b8:
fe:1b:05:22:54:b9:df:99:21:1b:83:85:5f:25:b9:
d4:70:12:1e:d2:1d:6b:13:7a:46:24:2c:9f:aa:4e:
1c:49:8d:13:94:d0:64:7a:95:43:0e:7d:d0:5f:92:
41:3f:c9:c1:e9:93:de:83:79:d7:82:4f:f3:5c:0f:
6c:e9:b7:ec:78:3f:7f:d1:67:38:8a:3e:90:88:56:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:20:64:AC:6E:75:1F:A4:66:BC:72:54:4D:65:BD:23:7F:A0:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41e0f6bb-bd47-3256-97f6-98aeb4ee78a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:df:1a:aa:0b:95:dc:49:14:e0:29:0f:94:bf:bc:c2:de:ce:
5e:60:65:07:15:ce:51:3e:3b:cb:76:79:a1:6a:c8:ae:7e:88:
d6:25:81:1c:ba:a3:01:e4:70:04:a2:36:11:d7:01:81:e0:82:
be:70:fc:34:8c:bc:70:46:f2:29:9e:7c:39:3f:5c:47:b7:78:
11:80:68:3c:58:dc:98:c0:56:df:ac:2f:90:a7:c3:f5:38:80:
a6:62:68:3c:d1:4f:1a:3b:1a:9c:61:46:d8:3e:7f:cf:ab:2e:
f9:8a:9e:5f:c6:ce:70:fe:a9:59:18:45:63:07:59:1a:ae:49:
a3:49:98:d8:02:a9:21:54:e5:01:0c:3d:d9:45:e7:c8:ce:56:
e3:a9:65:49:94:c5:82:8f:91:ae:e1:f1:33:93:b0:73:d3:e0:
4b:e4:11:ab:29:cd:f3:10:37:f9:cc:cd:7e:7f:80:03:ef:4a:
16:cf:21:27:e8:8e:bd:78:a0:c7:4b:3d:e1:fa:b9:77:c5:ab:
1d:02:25:de:14:68:42:23:75:e2:d9:6d:18:37:84:78:e7:6c:
bd:8b:79:4e:e8:83:48:bf:a9:c3:55:2d:64:f3:f1:5b:9e:3a:
c3:9c:0d:f4:45:c6:f8:33:6e:59:54:a7:51:90:ad:6c:96:4a:
af:a7:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:51 2025 by rpki-client