Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/887d9904-5000-3e0c-bb12-aac1e5211777.roa
File: 887d9904-5000-3e0c-bb12-aac1e5211777.roa (raw, json)
Hash identifier: rykHLaJnAg93C1tl24aQq5TxPO6FDLQFomPpLM1CvdM=
Subject key identifier: 7A:CF:7D:8E:C6:DC:F2:B0:69:28:96:A3:F4:D3:A1:3F:5D:23:38:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50B498B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/887d9904-5000-3e0c-bb12-aac1e5211777.roa
Signing time: Wed 19 Dec 2018 05:58:30 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=82ebcd88-f393-4e08-b6a8-16d28bdace5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:c6:90:d8:0d:dc:18:90:79:78:2e:a9:96:
8b:63:dd:4c:92:61:67:04:4b:f0:2d:fe:18:7a:85:
6d:7a:bf:b1:6f:b9:1f:bc:1c:91:63:c5:72:8f:c6:
6f:e0:2d:f7:54:cc:b6:8e:b7:6a:d4:53:92:1d:ed:
f5:8e:2d:90:db:f5:8b:bb:3d:3b:99:e6:37:5d:bb:
e1:75:8e:df:5a:3c:cd:5f:c1:31:27:b4:23:fc:07:
56:5d:2f:9a:e5:71:e0:89:25:39:c6:31:67:be:31:
bc:1c:d8:59:9f:90:0e:a3:17:d1:36:9e:b1:65:3d:
dd:17:eb:a5:75:7b:93:1b:7a:41:42:ef:b5:10:45:
be:a0:64:28:9f:d2:db:a3:d1:69:8f:ef:ca:f5:9f:
50:b8:23:a3:b8:25:e4:c8:60:80:29:95:a6:26:f7:
52:a7:3d:e9:da:18:b0:43:cd:95:6f:96:c6:0c:dd:
c2:10:24:d0:60:ef:33:2b:16:9c:7e:48:e3:a7:61:
41:9f:d8:b4:eb:20:42:6c:95:b1:ce:9a:2a:b0:a8:
28:f8:0b:75:5e:49:d1:93:64:ef:b3:44:bf:d1:b8:
23:10:76:47:e2:da:31:e9:38:86:58:4d:12:98:c9:
46:0e:b3:62:8b:2c:78:93:92:04:b6:f8:7f:5a:38:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:7D:8E:C6:DC:F2:B0:69:28:96:A3:F4:D3:A1:3F:5D:23:38:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/887d9904-5000-3e0c-bb12-aac1e5211777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:3f:5c:65:5e:f3:c7:1f:43:20:10:75:9a:58:83:d7:bc:26:
bb:af:b2:29:83:e4:d6:10:4a:d7:13:c1:4a:3c:44:0f:07:7b:
a8:4a:41:87:1b:e7:60:c9:d2:97:1a:a1:d8:a6:52:81:4f:58:
95:96:15:02:f6:68:46:eb:d8:73:fb:79:72:81:3f:1b:4f:c5:
59:63:23:04:3b:0c:b8:52:8b:bb:39:f3:aa:2c:9a:53:c7:e7:
3b:07:7f:1b:75:b3:66:3d:47:78:20:18:aa:9e:7a:e6:a0:d6:
74:e9:c8:19:3f:b9:c6:b2:b7:c3:2e:22:93:02:db:d2:97:a5:
04:f5:6a:fb:e0:e3:c5:cb:c5:11:1e:d2:52:47:9c:3c:16:06:
ed:1d:ab:b1:44:af:f4:e4:47:c8:3c:8a:53:79:3f:eb:bd:68:
78:8a:bc:b7:2c:05:02:53:ca:ba:85:72:20:90:0f:ee:94:71:
51:3c:4d:72:bf:d7:59:95:67:ec:a9:12:ec:c3:a7:6a:96:11:
82:00:50:02:97:d4:c4:eb:47:97:9d:ed:e0:99:e0:96:57:07:
4d:4d:7b:9b:49:16:32:d3:66:6d:39:c7:2e:32:85:d8:79:f2:
78:2c:94:70:a1:00:0d:24:a7:a8:bc:24:a2:6e:ad:44:92:2a:
62:04:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:04 2025 by rpki-client