Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49570a7a-1057-35ca-9763-f413632f4698.roa
File: 49570a7a-1057-35ca-9763-f413632f4698.roa (raw, json)
Hash identifier: 2kz7B9vlsnwLjbo0hKAV6jY7pKphQoXRTNiZHlKPuyY=
Subject key identifier: 98:F4:72:4A:EB:AE:9E:4F:7D:29:32:24:E5:C0:67:A9:47:B5:7E:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50A69D1
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49570a7a-1057-35ca-9763-f413632f4698.roa
Signing time: Wed 19 Dec 2018 05:57:33 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2e3f06d3-db2d-443e-b389-0c21b20d2138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:a1:34:88:28:bb:e8:a8:d6:0c:4d:fa:19:
6a:73:f3:62:f1:c8:40:87:af:08:9a:0f:86:48:ae:
d2:5d:33:57:64:f9:f4:5b:e5:d5:c3:3a:1b:a5:07:
28:0d:69:8a:5f:e8:b1:ae:53:69:db:7d:2b:88:ca:
d0:2e:93:f9:8e:8f:ca:4e:36:27:9c:15:b1:85:f9:
0f:9a:d6:78:e3:86:0e:26:0b:d6:26:b1:68:6f:f0:
f2:6f:d0:be:b2:c7:00:54:34:c2:92:01:9e:1f:09:
32:0d:d3:09:f9:6a:ba:49:45:46:72:37:7c:52:12:
ef:1d:1c:a0:fd:ea:bb:d2:63:b3:dd:59:9b:33:c5:
89:33:9f:cc:0c:66:87:ef:df:12:55:57:a5:f9:26:
5a:b8:5c:e8:5b:2c:db:80:83:82:19:7c:3e:b4:5c:
ee:49:13:cf:af:bf:04:a6:a4:69:e0:3b:36:26:cc:
0d:d8:51:26:5b:f9:4f:57:b0:1c:0f:95:50:4f:c0:
80:21:bd:48:de:7c:c2:fd:71:88:e7:3c:13:1b:c0:
7f:c8:e0:92:9e:52:8f:de:74:cc:bb:d6:cb:df:3f:
55:8b:db:43:c9:ed:9f:9c:17:d6:9f:3e:0d:8d:9f:
f7:71:6e:d6:f6:7d:5e:06:21:d4:01:8b:7e:9b:f6:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:72:4A:EB:AE:9E:4F:7D:29:32:24:E5:C0:67:A9:47:B5:7E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49570a7a-1057-35ca-9763-f413632f4698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:40:fa:32:23:eb:7b:7d:ac:45:c3:5f:ca:c1:ec:67:d0:61:
27:53:89:63:3e:a6:5f:f8:0b:c7:c8:52:eb:01:b3:ed:d0:76:
8d:8a:49:12:af:4b:a6:0e:15:fe:8b:2e:98:57:37:f4:12:99:
b6:06:e7:33:df:42:90:4c:f2:be:2c:07:e6:bd:d3:fd:e5:b0:
99:fa:8a:5f:c1:a4:28:de:80:2c:ca:08:bf:02:76:78:18:fe:
e1:5e:c8:9c:0b:39:53:e9:5b:f3:95:13:cb:6d:90:77:f5:f9:
76:28:f0:24:fa:37:20:f9:9f:93:4b:95:03:d9:49:82:2a:af:
d6:9b:27:ab:45:c1:2c:c0:ff:b2:1d:35:7b:f6:7d:0f:b8:a9:
ef:96:23:5d:24:81:48:0d:7e:21:72:4c:1a:c7:30:64:3f:be:
f3:4a:64:c0:11:f2:16:31:ec:1e:2b:06:f5:88:f9:14:98:ee:
be:a4:f3:72:2e:50:98:29:8f:92:09:26:58:7c:cd:da:76:a5:
73:5a:93:15:16:7c:0d:31:1d:75:25:f0:73:59:11:ed:f6:01:
11:da:07:e2:ba:1c:a7:c4:f5:df:ae:7a:50:59:76:38:19:46:
d8:38:cb:a6:d7:66:e7:f1:17:65:b3:35:68:df:d7:fb:ea:0e:
07:9a:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:20:14 2025 by rpki-client