Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bd78e0b-5be1-3189-835b-cb4ecbe809ba.roa
File: 4bd78e0b-5be1-3189-835b-cb4ecbe809ba.roa (raw, json)
Hash identifier: mP9u8wvCB2IJhgsFvhBDrsx5FXk01zHi+4cWcfOIjoE=
Subject key identifier: E8:FE:C2:4B:88:2A:6E:56:89:BD:48:F2:FE:E8:17:6F:35:69:60:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50B034D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bd78e0b-5be1-3189-835b-cb4ecbe809ba.roa
Signing time: Wed 19 Dec 2018 05:58:12 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=4501bae9-ed06-4e03-8389-118942214c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:3a:ee:7b:65:4e:da:53:9f:8d:7a:a2:88:
ff:8b:0c:68:81:9d:2e:ae:a9:0f:13:6d:cb:ae:c6:
49:7d:81:f0:2c:55:1a:5a:0b:5e:93:d3:f0:79:8a:
f9:07:27:db:58:49:b7:b4:d6:d1:9a:ef:6a:c6:be:
74:da:9a:2b:99:fc:f8:a8:64:02:35:7c:06:c8:59:
06:84:a8:c9:51:92:4b:1c:8f:f5:71:ed:14:53:0a:
04:f3:86:dc:83:c4:59:1c:98:d4:c1:17:84:e9:31:
b9:b4:cd:c1:4a:e5:5e:24:2e:e0:a2:a2:e8:8d:d4:
46:42:8b:6d:ee:f6:97:ce:f1:b2:38:4f:7e:d1:95:
4c:db:00:ef:a6:ff:c9:30:ba:9f:71:41:8b:de:37:
1b:e6:a1:00:ab:76:d4:79:c8:44:df:24:f4:26:eb:
b7:0b:bb:64:70:9a:b3:26:99:2c:60:ba:08:a1:7e:
c7:81:1a:fc:18:ab:97:0f:50:80:03:e8:ca:6c:ce:
50:9a:8d:1d:dd:d3:97:f8:96:e9:a6:0f:82:e9:c7:
a9:60:fa:82:80:c6:19:68:8e:f6:98:37:24:59:6f:
6c:02:94:b9:cb:d5:24:dd:d3:f6:9d:90:b4:13:d1:
33:02:7d:71:0a:d0:4a:60:7f:bf:4e:5e:98:52:b0:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:C2:4B:88:2A:6E:56:89:BD:48:F2:FE:E8:17:6F:35:69:60:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bd78e0b-5be1-3189-835b-cb4ecbe809ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c4:53:91:27:4e:66:05:55:79:79:c5:70:3b:6f:64:4c:a5:
ac:7d:de:51:fa:19:1c:a3:3e:46:b3:ab:f7:44:7d:1d:56:32:
e7:45:6a:67:b9:00:1e:e3:77:c8:4f:e1:26:1e:35:19:b8:a7:
e6:ac:c4:a6:c8:11:ff:64:18:a1:09:d2:96:36:27:93:e4:46:
8f:06:31:7e:c6:fa:f8:e1:51:cd:53:a3:b8:a9:2c:34:d6:6e:
da:b3:12:e2:40:56:76:30:b2:5a:87:be:c1:bf:ec:9c:b9:84:
1f:04:8b:9f:5c:a8:22:ad:5f:2c:dc:7a:49:83:e1:d8:43:71:
fd:da:d0:02:e8:65:e9:78:0b:5b:68:bd:4c:23:78:7f:d8:d5:
d1:e9:5d:7c:eb:73:7f:1a:1e:5a:9e:33:99:2a:7a:ec:ff:a2:
b0:72:84:71:40:ac:1e:05:c4:38:54:22:52:06:73:d9:b5:89:
c0:4c:48:ab:96:61:0e:15:75:15:78:1c:7e:4b:f0:26:66:99:
f9:43:d4:21:61:3c:bf:42:97:b9:ce:fe:33:15:c3:23:25:aa:
a9:15:1b:8a:aa:59:24:f8:71:28:f7:fa:4e:11:01:bb:5d:b2:
1a:1b:c5:fc:a6:4c:e7:d5:9f:9a:95:c5:fe:b5:03:2b:43:28:
af:04:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:08 2025 by rpki-client