Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c923c8f-f635-3058-8d1b-0a07f3e5ed75.roa
File: 4c923c8f-f635-3058-8d1b-0a07f3e5ed75.roa (raw, json)
Hash identifier: tezic7kKNQTW/RWnzV2/KPajwl1KmxZ9U2s5EFaqYcs=
Subject key identifier: 5F:67:64:27:D0:BF:25:E3:60:9A:AD:23:4F:A1:EA:ED:A6:82:72:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4922831
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c923c8f-f635-3058-8d1b-0a07f3e5ed75.roa
Signing time: Wed 19 Dec 2018 03:46:12 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=c4220f95-7c1a-4a3a-9822-4715ee80ed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:aa:12:19:3a:cd:63:3a:17:4c:88:10:43:
ca:76:80:79:99:ce:85:b0:df:8a:89:0f:76:ce:3c:
77:03:90:ba:c8:a8:23:7e:e2:c0:44:2c:dd:a3:0a:
86:82:95:41:cc:94:d2:09:cd:03:a1:78:26:75:07:
ec:34:2a:d5:3c:b0:74:57:4f:e9:32:b2:d8:1a:cc:
7a:84:fe:a3:3d:0b:f3:e5:bc:73:24:7d:c3:1d:5c:
28:db:3d:76:02:70:86:fd:4a:e8:ef:8d:84:5b:66:
59:b0:3f:e3:4b:74:4b:9e:e8:70:fe:76:e5:3b:d7:
47:eb:1c:18:c5:7a:b2:67:72:7d:6a:a0:b1:68:d2:
6f:3e:14:12:bf:5f:68:3b:9a:9a:57:b4:b5:24:d8:
c0:93:18:92:99:93:e8:f5:12:55:7f:f0:2f:8e:7b:
66:eb:07:09:4d:cb:66:91:5b:2b:b0:dc:0a:d3:b9:
de:55:8a:db:f6:91:b3:50:34:5c:2a:fc:0b:92:1f:
3d:71:8a:33:61:7c:e8:ee:34:b4:32:47:77:b9:23:
7f:a1:96:44:37:46:9c:d9:11:75:49:19:55:99:89:
a5:15:b1:d0:e0:6f:6b:5f:3a:82:54:8a:12:3a:05:
37:31:fd:c6:3a:29:d2:25:9a:17:3d:fd:30:e0:64:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:64:27:D0:BF:25:E3:60:9A:AD:23:4F:A1:EA:ED:A6:82:72:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c923c8f-f635-3058-8d1b-0a07f3e5ed75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:61:5c:0c:fe:2b:13:97:de:09:38:56:44:c7:d4:30:54:9d:
22:3a:ea:c3:f2:b2:a3:e3:ff:9c:be:1b:df:74:7a:14:44:6b:
5d:70:a8:b2:4d:93:53:44:2b:d0:ff:2c:da:1f:0c:04:34:4c:
9e:30:17:9a:ee:00:80:8d:12:99:d6:4f:00:c2:b4:6d:0b:ac:
8a:46:22:78:61:0c:7d:af:70:22:21:28:f8:3b:32:14:e2:70:
16:20:d4:0f:a0:3d:21:62:e0:e9:ab:4e:e9:a6:f1:a9:fa:21:
63:73:48:11:54:06:4f:c9:83:08:e2:a4:66:3e:60:4c:52:66:
95:5d:42:a7:7f:b1:7b:cf:b2:94:7c:45:63:ec:7f:be:79:64:
dd:27:fd:d8:4c:55:70:72:dd:4a:5b:00:b9:e3:8c:24:36:11:
7f:74:1f:47:de:a6:4e:22:b3:b6:fb:62:d1:01:a4:98:c4:3a:
0c:5e:88:ba:d4:bd:ed:e1:96:5c:c8:16:c1:8e:66:9f:07:b1:
0c:6b:72:82:77:e2:7b:ac:22:c6:91:70:66:5d:a5:2a:45:02:
74:ea:2a:c9:11:4e:dc:52:9d:dd:e8:0b:c1:5e:2b:17:7e:5a:
bb:3d:72:ee:f1:46:2a:80:01:8b:4f:0f:5c:01:4b:00:9f:3b:
f6:8b:55:f5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SSKDEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGM0
MjIwZjk1LTdjMWEtNGEzYS05ODIyLTQ3MTVlZTgwZWQwZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKNAqhIZOs1jOhdMiBBDynaAeZnOhbDfiokPds48
dwOQusioI37iwEQs3aMKhoKVQcyU0gnNA6F4JnUH7DQq1TywdFdP6TKy2BrMeoT+
oz0L8+W8cyR9wx1cKNs9dgJwhv1K6O+NhFtmWbA/40t0S57ocP525TvXR+scGMV6
smdyfWqgsWjSbz4UEr9faDuamle0tSTYwJMYkpmT6PUSVX/wL457ZusHCU3LZpFb
K7DcCtO53lWK2/aRs1A0XCr8C5IfPXGKM2F86O40tDJHd7kjf6GWRDdGnNkRdUkZ
VZmJpRWx0OBva186glSKEjoFNzH9xjop0iWaFz39MOBkjiECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRfZ2Qn0L8l42CarSNPoertpoJyfDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzRjOTIzYzhmLWY2MzUtMzA1
OC04ZDFiLTBhMDdmM2U1ZWQ3NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbBjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAi2FcDP4rE5feCThWRMfUMFSdIjrqw/Kyo+P/nL4b33R6FERrXXCosk2TU0Qr
0P8s2h8MBDRMnjAXmu4AgI0SmdZPAMK0bQusikYieGEMfa9wIiEo+DsyFOJwFiDU
D6A9IWLg6atO6abxqfohY3NIEVQGT8mDCOKkZj5gTFJmlV1Cp3+xe8+ylHxFY+x/
vnlk3Sf92ExVcHLdSlsAueOMJDYRf3QfR96mTiKztvti0QGkmMQ6DF6IutS97eGW
XMgWwY5mnwexDGtygnfie6wixpFwZl2lKkUCdOoqyRFO3FKd3egLwV4rF35auz1y
7vFGKoABi08PXAFLAJ879otV9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:49 2025 by rpki-client