Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1606682-f5b1-3adf-a8e2-5027a7906245.roa
File: a1606682-f5b1-3adf-a8e2-5027a7906245.roa (raw, json)
Hash identifier: aQD35RTXscPNvrK4sByjORr5vBGzu/Gft3i62OX4eMI=
Subject key identifier: 03:4A:FA:7A:70:E8:2A:97:82:CE:1F:37:E6:60:7E:AC:38:DE:AD:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50A9E8A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1606682-f5b1-3adf-a8e2-5027a7906245.roa
Signing time: Wed 19 Dec 2018 05:57:46 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=c7fde1cd-79ac-4882-9747-24c8a50b4c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:d4:6c:84:e2:a7:d4:4f:4f:e5:b0:61:09:
c2:98:38:b1:6f:5a:ba:b9:a0:d3:17:4b:2b:5d:fd:
48:94:33:76:dc:19:73:2f:e1:27:3b:76:b8:18:14:
32:02:10:cf:1d:ed:90:d7:c1:47:92:24:a2:d6:31:
cc:9c:8d:9f:16:e9:aa:1a:5d:13:1a:3e:6a:89:c1:
89:e5:fa:18:80:52:24:ba:c9:32:ac:2c:67:f4:ee:
81:2a:33:ed:3c:b0:f9:78:4f:6e:88:54:c8:ee:d5:
41:4d:f1:50:48:50:3b:8f:f4:a8:e6:5f:8d:17:ca:
83:3c:d4:bd:2e:09:24:7f:9e:b3:31:88:0b:21:88:
ce:81:c6:a1:73:dd:b0:55:e6:cb:4e:ec:45:3f:06:
46:be:d8:c3:9b:42:f5:a7:93:5d:56:a4:b3:6b:37:
69:a9:bb:9a:b8:19:aa:86:3c:f2:f3:be:8c:b0:00:
16:71:b4:bf:4b:21:bc:df:e2:dc:3a:df:47:96:41:
bf:2d:d0:ac:8c:a9:34:f9:81:9e:b7:ce:95:00:6d:
c6:3a:14:7f:ee:b4:20:7e:ff:4f:c0:8a:ad:83:5c:
aa:82:2a:36:f3:b3:14:7a:45:9a:45:ec:83:85:4f:
0e:77:c2:85:14:62:eb:14:46:63:76:a0:36:ce:57:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:FA:7A:70:E8:2A:97:82:CE:1F:37:E6:60:7E:AC:38:DE:AD:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1606682-f5b1-3adf-a8e2-5027a7906245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:29:51:35:d8:6a:fb:83:f9:31:68:97:50:95:b3:50:a3:75:
98:5c:d3:5d:22:8d:8d:9b:cf:37:3e:25:05:5c:63:0c:e9:9b:
97:3a:fe:18:79:c2:e1:86:a6:ed:4c:53:a8:a3:a9:4f:6c:3e:
a4:c7:6a:96:76:7a:8b:93:2c:cb:df:6d:e5:cf:d9:27:d7:07:
88:67:d9:68:28:07:86:8e:b2:4d:b3:f0:e2:9b:f6:4a:7e:a7:
90:16:e8:83:30:f1:38:1b:c1:67:d1:33:ec:f6:33:95:65:58:
15:fb:aa:f1:bf:c8:65:6e:4c:9a:f0:a9:91:07:41:1b:d3:9b:
2f:08:d0:68:8e:34:e3:e2:6d:44:fd:0d:d8:de:9f:d9:f3:9e:
65:07:b1:cc:7c:87:96:29:eb:e8:1e:24:6d:16:c4:45:a6:49:
38:c8:3d:9d:ab:a8:00:c8:58:ff:72:f0:15:37:1a:0b:7d:64:
7f:53:0e:d1:54:e8:c8:35:f6:d6:f3:b5:fb:77:dd:ca:3a:d1:
2a:73:92:fe:ed:6d:e9:b6:8c:b3:32:42:7a:8f:d3:c6:40:c7:
34:d1:96:e8:ed:49:ab:fa:c6:8f:ce:5b:0b:72:73:84:d3:07:
ae:28:a9:54:52:a7:48:b7:19:ec:60:fa:1a:47:d0:ef:26:31:
dd:e9:b4:a8
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8UKnoowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGM3
ZmRlMWNkLTc5YWMtNDg4Mi05NzQ3LTI0YzhhNTBiNGM1YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALan1GyE4qfUT0/lsGEJwpg4sW9aurmg0xdLK139
SJQzdtwZcy/hJzt2uBgUMgIQzx3tkNfBR5IkotYxzJyNnxbpqhpdExo+aonBieX6
GIBSJLrJMqwsZ/TugSoz7Tyw+XhPbohUyO7VQU3xUEhQO4/0qOZfjRfKgzzUvS4J
JH+eszGICyGIzoHGoXPdsFXmy07sRT8GRr7Yw5tC9aeTXVaks2s3aam7mrgZqoY8
8vO+jLAAFnG0v0shvN/i3DrfR5ZBvy3QrIypNPmBnrfOlQBtxjoUf+60IH7/T8CK
rYNcqoIqNvOzFHpFmkXsg4VPDnfChRRi6xRGY3agNs5XelkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQDSvp6cOgql4LOHzfmYH6sON6tOzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2ExNjA2NjgyLWY1YjEtM2Fk
Zi1hOGUyLTUwMjdhNzkwNjI0NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbDzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAfilRNdhq+4P5MWiXUJWzUKN1mFzTXSKNjZvPNz4lBVxjDOmblzr+GHnC4Yam
7UxTqKOpT2w+pMdqlnZ6i5Msy99t5c/ZJ9cHiGfZaCgHho6yTbPw4pv2Sn6nkBbo
gzDxOBvBZ9Ez7PYzlWVYFfuq8b/IZW5MmvCpkQdBG9ObLwjQaI404+JtRP0N2N6f
2fOeZQexzHyHlinr6B4kbRbERaZJOMg9nauoAMhY/3LwFTcaC31kf1MO0VToyDX2
1vO1+3fdyjrRKnOS/u1t6baMszJCeo/TxkDHNNGW6O1Jq/rGj85bC3JzhNMHriip
VFKnSLcZ7GD6GkfQ7yYx3em0qA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:30 2025 by rpki-client