Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa
File: 64b4837a-6849-386a-91d0-a51758be8fb8.roa (raw, json)
Hash identifier: RFXs8Kd+xeIfU6lBmIikdvlxoTg5bVWNg3Nb7fTvTHA=
Subject key identifier: 06:4F:EB:7D:C7:19:0C:2D:EB:E7:1D:BC:9B:95:F8:10:F4:A0:1C:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4691CB5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa
Signing time: Wed 19 Dec 2018 03:01:22 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=70e3f586-bed3-48c5-8e50-a1eaddb8df97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:9f:52:22:77:d6:73:0b:b3:d8:ee:69:98:
b6:c4:23:dd:02:28:b7:bb:09:30:cd:48:59:67:7d:
e4:35:14:07:5b:86:85:f9:df:77:5c:fe:6b:9a:8f:
46:a9:57:1a:55:b2:1a:96:2d:99:86:8c:d2:f7:90:
74:76:be:91:bd:af:16:c4:e7:d9:88:6b:5e:ac:2c:
57:e3:b4:3a:c7:ed:28:57:31:b3:e4:7f:6a:5f:59:
d6:7f:a4:97:e5:a4:1e:f7:56:42:2a:13:e3:e9:d5:
2e:27:8f:28:61:39:52:12:57:37:75:8d:ad:33:da:
05:ed:8f:27:fa:da:2d:5c:f4:3e:b2:4e:44:48:23:
a3:20:a3:39:76:cd:9a:16:44:64:a9:2c:9d:83:2d:
23:54:b0:0c:30:3c:a6:72:d8:2a:18:fa:f4:19:10:
00:ad:ae:6a:fa:ab:48:2e:d4:d9:25:db:bb:4c:c5:
e3:65:1d:24:72:79:d8:74:5f:9b:dd:ba:62:f4:4a:
6e:6b:6e:c8:ec:00:72:46:d3:b4:c9:43:96:83:69:
43:47:a5:0c:06:7f:08:dd:1b:28:dd:06:2a:e3:93:
3e:9a:46:75:51:f7:ce:bd:5a:35:69:98:37:fc:11:
9a:30:c5:53:0b:97:52:08:a0:c3:27:53:22:fd:ba:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:EB:7D:C7:19:0C:2D:EB:E7:1D:BC:9B:95:F8:10:F4:A0:1C:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:8c:87:27:cf:2e:47:7a:b4:3b:f6:1b:d6:50:12:f7:ca:57:
5a:7a:c7:0a:e9:8b:25:96:5c:f1:c8:55:08:c2:80:92:59:ab:
4c:78:9d:fc:71:f0:34:49:01:1e:3b:7c:18:4a:af:38:aa:22:
7d:5a:73:a3:dd:55:56:38:e0:da:d0:0c:8d:07:b2:4b:36:0b:
8d:4d:b3:0d:27:0f:94:32:33:8a:c1:70:d1:08:2b:77:f3:17:
8c:04:87:9f:e9:36:02:2a:41:e1:fb:45:24:64:af:9d:9f:b7:
5f:42:d9:07:28:ba:d2:9a:ab:1c:48:a0:e6:6c:4c:6d:5d:e4:
0c:19:8c:6d:7a:b2:b9:8c:e4:9f:0f:c2:9f:44:11:6a:a7:41:
01:e0:5c:4d:3b:81:7a:7b:e4:ab:c6:bd:79:d4:6a:8f:85:1c:
d5:0d:45:7d:7b:40:25:73:af:ec:e5:c2:a7:9a:13:42:a6:b6:
05:9d:4b:f4:af:82:3c:c8:6c:a0:2d:b9:4d:5a:29:c7:8c:1d:
0e:84:63:d8:23:b1:4d:06:9d:dd:02:78:cf:de:f5:4b:23:4c:
a3:a9:2c:46:94:07:6f:cb:79:66:e6:f7:bc:88:57:c0:22:8d:
fc:04:af:24:29:23:64:1f:4e:8b:51:ef:be:1d:47:84:26:1a:
39:a3:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:21 2025 by rpki-client