Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ada1aaa-01b1-3348-a53b-e560cd483a96.roa
File: 9ada1aaa-01b1-3348-a53b-e560cd483a96.roa (raw, json)
Hash identifier: qIxlhQu/ZTwxDTyBq7/vfooCcHGC/7ec3BoO7jBtvW0=
Subject key identifier: 3C:1E:2D:CF:88:60:32:05:CF:58:BA:93:36:9F:2D:BD:54:66:AF:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3C059
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ada1aaa-01b1-3348-a53b-e560cd483a96.roa
Signing time: Sun 21 Oct 2018 08:17:57 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=1fc76e33-fa88-4573-93f8-1a1f59788a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:95:99:f6:f6:e6:b8:cf:26:ee:3a:30:1c:
3c:64:7c:4c:73:ed:ab:e2:39:3c:b1:ca:7c:cd:38:
51:09:c3:08:29:52:db:35:df:bd:3d:7d:e0:6a:04:
be:9b:93:ae:02:41:ed:df:45:44:4b:9e:dd:50:5e:
49:cb:24:c0:ae:7e:58:e6:f0:da:53:fd:4e:6a:79:
7b:fc:87:30:92:d0:37:46:18:f8:5b:1c:d2:20:e2:
8f:21:5a:a1:0a:cf:47:07:73:38:3b:1a:b2:5d:d7:
ec:2e:61:f2:3b:c4:67:ee:c2:a4:59:2d:03:99:b3:
68:cd:1b:58:aa:df:2c:b5:19:37:19:31:d7:56:66:
81:6d:d5:58:1e:44:07:b6:aa:6e:36:01:9f:1a:50:
e5:ef:38:1e:84:65:7f:db:c7:c3:45:7a:d8:d9:d3:
c9:52:be:9c:f1:a8:0b:73:07:4b:1f:cd:68:db:60:
c0:ee:60:a0:06:c6:f6:85:4f:41:4a:f2:4c:db:04:
8b:4d:e6:ea:14:75:70:a4:4f:f5:0e:9e:fa:5e:fc:
18:0a:3f:9b:fb:46:1b:f6:57:93:51:fe:c7:67:fe:
a8:cb:55:58:c9:38:5d:da:d3:18:7c:86:af:fa:6c:
29:1d:46:31:fb:01:15:d8:f5:a9:58:a9:a6:34:c3:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1E:2D:CF:88:60:32:05:CF:58:BA:93:36:9F:2D:BD:54:66:AF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ada1aaa-01b1-3348-a53b-e560cd483a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4d:a9:b2:b0:13:af:c5:4a:4c:4e:62:81:39:91:e8:29:a0:
d8:5e:60:0b:2a:ee:20:32:12:b3:54:29:82:54:cf:ee:69:fe:
5c:4f:f2:92:5a:1a:bd:9f:62:1c:1f:a7:35:15:64:93:db:3c:
43:36:32:c3:27:b4:82:9a:c4:a1:81:5e:bc:36:ee:f5:e5:10:
34:a7:7c:ba:dd:9e:38:9a:8e:54:34:1f:81:da:d5:b1:46:5e:
0d:3b:06:5d:aa:70:9c:ec:52:3c:db:6d:ea:cb:3c:3e:47:75:
04:6b:b6:b6:00:f4:f3:95:4b:68:b1:ac:d1:b4:88:e4:64:54:
7c:d1:7a:1a:36:fa:8f:db:40:2a:3a:0c:33:b7:03:49:5c:7f:
e8:15:47:ce:c1:4d:52:61:50:6d:6f:f3:db:41:ba:e6:b8:e2:
f0:4f:12:b9:a0:eb:8f:55:ce:64:ab:f6:9a:79:32:ab:0e:e3:
8a:99:60:08:2f:e8:7f:65:9c:8d:9e:2a:b0:9f:8d:a2:cd:80:
90:85:22:89:a9:14:e6:f0:25:5f:f0:ec:c3:80:2a:af:e3:94:
2a:99:c8:af:b4:0d:e9:48:af:63:d0:11:96:77:fe:4b:72:50:
82:36:00:dd:ee:2d:d9:6b:0e:ce:88:3e:23:7a:a5:8e:68:17:
70:1e:61:b6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWzwFkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDFm
Yzc2ZTMzLWZhODgtNDU3My05M2Y4LTFhMWY1OTc4OGExMDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALj5lZn29ua4zybuOjAcPGR8THPtq+I5PLHKfM04
UQnDCClS2zXfvT194GoEvpuTrgJB7d9FREue3VBeScskwK5+WObw2lP9Tmp5e/yH
MJLQN0YY+Fsc0iDijyFaoQrPRwdzODsasl3X7C5h8jvEZ+7CpFktA5mzaM0bWKrf
LLUZNxkx11ZmgW3VWB5EB7aqbjYBnxpQ5e84HoRlf9vHw0V62NnTyVK+nPGoC3MH
Sx/NaNtgwO5goAbG9oVPQUryTNsEi03m6hR1cKRP9Q6e+l78GAo/m/tGG/ZXk1H+
x2f+qMtVWMk4XdrTGHyGr/psKR1GMfsBFdj1qVippjTDBu8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ8Hi3PiGAyBc9YupM2ny29VGav/jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzlhZGExYWFhLTAxYjEtMzM0
OC1hNTNiLWU1NjBjZDQ4M2E5Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbDDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAIk2psrATr8VKTE5igTmR6Cmg2F5gCyruIDISs1QpglTP7mn+XE/ykloavZ9i
HB+nNRVkk9s8QzYywye0gprEoYFevDbu9eUQNKd8ut2eOJqOVDQfgdrVsUZeDTsG
XapwnOxSPNtt6ss8Pkd1BGu2tgD085VLaLGs0bSI5GRUfNF6Gjb6j9tAKjoMM7cD
SVx/6BVHzsFNUmFQbW/z20G65rji8E8SuaDrj1XOZKv2mnkyqw7jiplgCC/of2Wc
jZ4qsJ+Nos2AkIUiiakU5vAlX/Dsw4Aqr+OUKpnIr7QN6UivY9ARlnf+S3JQgjYA
3e4t2WsOzog+I3qljmgXcB5htg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:11 2025 by rpki-client