Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b7e3fb-c684-3068-8271-665986f92b8c.roa
File: 96b7e3fb-c684-3068-8271-665986f92b8c.roa (raw, json)
Hash identifier: hYd6TNqTx++vXAkJonu6OoxSjB6LGNAERxPlSwUFmK4=
Subject key identifier: 60:B6:5C:2C:DA:28:C6:A5:0C:5C:95:64:38:85:23:A8:92:10:DC:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C492CA70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b7e3fb-c684-3068-8271-665986f92b8c.roa
Signing time: Wed 19 Dec 2018 03:46:53 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:ca:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d4a952ac-ecb7-4e0a-a5a3-4fd7f8626f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:2e:c0:36:74:d6:f7:e4:80:74:b3:f1:47:
98:71:d2:48:7d:6f:46:90:43:6c:be:b7:e3:3b:27:
b7:c3:b0:18:f7:52:ba:d7:38:a7:50:15:be:d6:03:
f1:d6:72:a6:24:58:e0:dd:30:ae:3e:f9:c4:2e:a6:
03:89:da:5e:bf:ef:9c:f0:28:ca:e9:51:2e:6f:5d:
4b:c3:ef:13:f4:c5:cd:99:70:dd:01:af:6f:84:ba:
95:1f:d8:b4:ef:a3:46:b7:48:5d:84:0f:a0:13:2a:
8b:93:fd:cb:09:21:34:5d:24:1d:27:9d:44:7d:f8:
56:dd:8f:84:16:93:87:05:15:c8:2d:18:39:66:05:
58:24:5b:5a:10:fe:63:6e:27:1d:6d:11:2c:cf:bf:
d7:f4:73:fb:85:b2:17:c0:2b:de:b8:e1:0d:22:81:
04:16:65:24:9d:28:9b:97:3b:66:f3:89:69:70:57:
3a:36:fe:27:13:5d:5b:5e:c6:12:eb:11:21:1d:38:
39:71:59:98:60:2e:f8:47:ed:0e:74:ba:3b:21:c6:
e7:9b:55:9b:7c:cb:d4:29:a6:ed:d3:8c:c7:ea:0a:
2b:eb:c2:63:d7:18:5b:67:2d:b5:d9:06:b5:de:4e:
1f:a1:a6:a9:41:0b:24:4f:25:5d:65:fa:de:d6:bb:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B6:5C:2C:DA:28:C6:A5:0C:5C:95:64:38:85:23:A8:92:10:DC:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b7e3fb-c684-3068-8271-665986f92b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:81:d6:69:d6:be:b4:62:5d:92:c8:4c:29:c9:6e:9e:82:d1:
f8:c0:eb:eb:e5:0b:98:85:c6:86:2d:ce:15:46:8b:b4:94:f2:
25:34:ab:1e:6b:19:cd:18:b1:8c:40:fa:88:00:3c:97:b9:6c:
0b:a2:0b:f7:19:5c:47:3e:b8:ff:f4:e0:31:96:87:e0:32:d3:
10:d6:5f:6b:00:b2:00:a0:d3:46:9c:b3:12:a1:fb:7c:76:85:
b9:fe:30:b2:98:ea:d9:41:a7:42:6f:89:c2:f9:40:dd:02:4e:
7f:95:8a:04:35:b6:1d:e3:8e:f8:31:fb:dd:f6:d7:34:5b:e3:
40:7f:13:6b:48:c9:e0:74:f5:96:0c:94:76:86:c1:d9:37:01:
68:78:57:1d:af:42:fe:0d:82:6b:9b:0c:4f:86:63:c8:ce:df:
a5:74:36:ed:c3:a2:93:f5:5d:6b:2d:d3:e9:0b:f4:7b:10:7c:
20:37:b6:f7:23:f6:13:aa:67:5c:01:d4:09:38:f5:ab:18:be:
3d:1f:dc:26:7b:8a:3a:b7:22:67:bf:17:57:64:f9:f1:ad:e5:
24:c0:96:43:61:ac:7f:95:16:a9:8f:db:2a:e8:e3:95:f1:3a:
68:b2:50:e1:4d:2a:00:e8:eb:16:6a:72:7c:b7:a8:db:8c:b2:
bb:a6:bc:56
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SSynAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGQ0
YTk1MmFjLWVjYjctNGUwYS1hNWEzLTRmZDdmODYyNmY3ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMQyLsA2dNb35IB0s/FHmHHSSH1vRpBDbL634zsn
t8OwGPdSutc4p1AVvtYD8dZypiRY4N0wrj75xC6mA4naXr/vnPAoyulRLm9dS8Pv
E/TFzZlw3QGvb4S6lR/YtO+jRrdIXYQPoBMqi5P9ywkhNF0kHSedRH34Vt2PhBaT
hwUVyC0YOWYFWCRbWhD+Y24nHW0RLM+/1/Rz+4WyF8Ar3rjhDSKBBBZlJJ0om5c7
ZvOJaXBXOjb+JxNdW17GEusRIR04OXFZmGAu+EftDnS6OyHG55tVm3zL1Cmm7dOM
x+oKK+vCY9cYW2cttdkGtd5OH6GmqUELJE8lXWX63ta7szsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRgtlws2ijGpQxclWQ4hSOokhDcgjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzk2YjdlM2ZiLWM2ODQtMzA2
OC04MjcxLTY2NTk4NmY5MmI4Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbGzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAK4HWada+tGJdkshMKclunoLR+MDr6+ULmIXGhi3OFUaLtJTyJTSrHmsZzRix
jED6iAA8l7lsC6IL9xlcRz64//TgMZaH4DLTENZfawCyAKDTRpyzEqH7fHaFuf4w
spjq2UGnQm+JwvlA3QJOf5WKBDW2HeOO+DH73fbXNFvjQH8Ta0jJ4HT1lgyUdobB
2TcBaHhXHa9C/g2Ca5sMT4ZjyM7fpXQ27cOik/Vday3T6Qv0exB8IDe29yP2E6pn
XAHUCTj1qxi+PR/cJnuKOrciZ78XV2T58a3lJMCWQ2Gsf5UWqY/bKujjlfE6aLJQ
4U0qAOjrFmpyfLeo24yyu6a8Vg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:22 2025 by rpki-client