Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9558b709-002e-3124-9a1c-53810b7ad4c0.roa
File: 9558b709-002e-3124-9a1c-53810b7ad4c0.roa (raw, json)
Hash identifier: cIEMgVDCAyac/DBA5C0T2JuUIZefdYtfLG7ac6aOH0M=
Subject key identifier: CB:4E:34:6E:49:8D:BC:E4:41:77:09:03:B7:33:15:68:6F:B2:86:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD48AF0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9558b709-002e-3124-9a1c-53810b7ad4c0.roa
Signing time: Wed 10 Oct 2018 07:15:25 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.119.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=e7ab425e-2acc-486f-9be6-edd665d00e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:cf:33:dd:3f:82:9d:63:88:fc:6c:43:47:
b3:63:ab:9f:81:b9:43:d7:5d:e2:f3:95:41:82:e7:
55:d8:05:67:02:6e:eb:12:3c:ee:34:e2:8e:12:8c:
5a:c1:70:c4:5b:9e:5f:bf:c6:10:d2:d6:86:d8:c8:
96:37:2c:c7:6f:73:b0:0a:62:03:8d:bd:29:b9:2f:
67:ce:ae:b3:3c:54:a4:a1:71:67:62:ea:fe:72:2e:
70:ef:43:d3:ec:55:27:b1:b3:cb:17:ea:94:c5:c6:
87:9d:ec:cf:08:99:92:21:90:27:92:fc:0c:55:23:
16:05:24:d3:ae:e8:1d:22:71:86:5a:aa:78:25:83:
fd:08:74:4f:a4:55:4c:b8:d9:a3:3e:c4:d8:9f:4b:
49:1e:db:d4:65:6e:2b:46:6d:9d:29:02:21:be:ad:
4a:1b:b8:0c:df:46:f1:9f:a0:2b:22:96:5d:93:cb:
22:0a:3f:e1:c7:dd:2b:e3:2c:48:bc:b3:e6:5e:6a:
1f:77:20:7c:16:d6:14:41:c4:a5:c3:73:c9:d7:53:
16:a6:1e:38:bf:5e:6c:1a:e4:4a:13:80:62:e4:c5:
15:c1:24:c3:e7:65:81:b9:ec:59:84:5a:9b:45:f3:
76:8d:33:bd:16:af:16:9d:5b:41:eb:85:bf:1d:88:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:34:6E:49:8D:BC:E4:41:77:09:03:B7:33:15:68:6F:B2:86:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9558b709-002e-3124-9a1c-53810b7ad4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:bf:79:e7:3a:0a:0e:6c:37:95:6e:9e:c4:79:73:3e:c1:a3:
a8:ea:ea:80:f4:14:b3:67:d0:9e:da:9a:e4:c9:97:ff:c1:04:
d5:de:cd:6e:85:5e:45:db:cb:4c:8c:b9:df:56:6d:a5:5e:be:
6b:5b:a9:be:03:bb:01:8a:8c:51:91:b6:83:b3:e1:06:84:ea:
ad:c6:21:79:2e:71:8c:f7:dd:7a:41:e6:1f:42:5d:2d:af:e4:
f9:f6:6f:89:9a:8a:7c:cf:4a:e6:32:b3:16:c7:0e:ea:6e:2e:
38:49:9f:1e:ab:46:33:49:08:f2:e8:64:32:50:63:d9:d3:9b:
47:c5:8f:0a:ce:39:46:17:5b:84:15:1e:5e:db:f5:a0:41:ea:
21:3c:24:b1:6a:cb:cb:4e:7c:9f:2e:ab:07:cf:65:98:b7:7d:
2f:40:3d:a4:87:d9:25:c8:11:03:6a:4c:79:8e:bb:a6:7f:3b:
5f:e0:be:8e:8c:73:78:2e:37:27:d7:74:8b:2c:84:7f:ff:59:
84:88:f1:ea:37:68:d7:67:6f:8e:f3:7c:c6:a5:42:23:fe:b5:
9f:c8:e5:51:a3:8a:dd:18:92:a9:15:3a:2d:30:b8:7d:a4:4e:
3b:45:04:a3:ca:55:d4:58:c4:a1:3b:8e:cb:28:f0:e3:92:10:
20:e0:44:15
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlzUivAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGU3
YWI0MjVlLTJhY2MtNDg2Zi05YmU2LWVkZDY2NWQwMGUwZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANZhzzPdP4KdY4j8bENHs2Orn4G5Q9dd4vOVQYLn
VdgFZwJu6xI87jTijhKMWsFwxFueX7/GENLWhtjIljcsx29zsApiA429KbkvZ86u
szxUpKFxZ2Lq/nIucO9D0+xVJ7GzyxfqlMXGh53szwiZkiGQJ5L8DFUjFgUk067o
HSJxhlqqeCWD/Qh0T6RVTLjZoz7E2J9LSR7b1GVuK0ZtnSkCIb6tShu4DN9G8Z+g
KyKWXZPLIgo/4cfdK+MsSLyz5l5qH3cgfBbWFEHEpcNzyddTFqYeOL9ebBrkShOA
YuTFFcEkw+dlgbnsWYRam0Xzdo0zvRavFp1bQeuFvx2IxvECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTLTjRuSY285EF3CQO3MxVob7KGlzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzk1NThiNzA5LTAwMmUtMzEy
NC05YTFjLTUzODEwYjdhZDRjMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjR3uDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAr7955zoKDmw3lW6exHlzPsGjqOrqgPQUs2fQntqa5MmX/8EE1d7NboVeRdvL
TIy531ZtpV6+a1upvgO7AYqMUZG2g7PhBoTqrcYheS5xjPfdekHmH0JdLa/k+fZv
iZqKfM9K5jKzFscO6m4uOEmfHqtGM0kI8uhkMlBj2dObR8WPCs45RhdbhBUeXtv1
oEHqITwksWrLy058ny6rB89lmLd9L0A9pIfZJcgRA2pMeY67pn87X+C+joxzeC43
J9d0iyyEf/9ZhIjx6jdo12dvjvN8xqVCI/61n8jlUaOK3RiSqRU6LTC4faROO0UE
o8pV1FjEoTuOyyjw45IQIOBEFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:51 2025 by rpki-client