Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3648a2b-5fe5-3bca-891d-e472795a1907.roa
File: a3648a2b-5fe5-3bca-891d-e472795a1907.roa (raw, json)
Hash identifier: wapMAKoGPzqZwV1UIVIpFvEa66Mx3wKjOLmQmhga1SU=
Subject key identifier: A7:DE:2C:98:C0:B2:BE:37:8E:87:E6:84:63:06:FB:FF:65:66:23:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C2F2FB7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3648a2b-5fe5-3bca-891d-e472795a1907.roa
Signing time: Wed 10 Oct 2018 04:14:48 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2f:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=6d8d1f6a-b977-489a-8ab1-14d8b45a1cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:be:9e:84:4c:36:37:42:5b:9e:44:c9:e9:
e9:82:c1:7a:70:4e:5f:a6:f7:73:6c:e5:60:94:b3:
68:a7:40:8d:1f:f2:b4:90:f5:06:62:f9:6a:09:e1:
76:60:5a:dc:9a:ab:8f:4a:29:aa:42:a2:9b:07:a2:
74:b8:87:c9:78:98:fb:1e:ff:4f:fa:f3:fc:09:39:
f6:be:22:f5:5d:18:7f:cd:99:e7:42:90:a3:e2:95:
58:15:6e:d8:2a:43:8d:58:d3:78:f6:37:98:e3:25:
9a:c5:ff:0a:ce:9f:9c:cd:ee:16:68:83:e0:96:b2:
5f:a2:3b:0d:9c:ea:68:c2:c6:5d:7f:7a:0d:70:0f:
da:f9:72:65:9f:1d:fd:a2:3f:2d:18:09:16:ae:26:
c9:83:58:3d:1c:be:b6:94:30:24:63:6c:5a:fd:db:
37:b2:11:0e:26:b4:73:c9:90:8e:31:6b:f7:10:28:
f2:25:e6:be:64:38:3b:b7:6c:ff:b5:da:09:b7:78:
21:fb:1c:ce:56:09:dc:64:2d:c1:98:56:b0:f9:e9:
65:d9:0c:c1:53:1d:58:b6:cc:6d:9c:e7:f7:63:85:
24:ea:90:ca:ed:ad:44:60:b1:76:49:50:ee:56:4e:
f5:76:5d:a0:1e:2e:07:e2:65:5d:54:2e:79:87:21:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:2C:98:C0:B2:BE:37:8E:87:E6:84:63:06:FB:FF:65:66:23:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3648a2b-5fe5-3bca-891d-e472795a1907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:fe:99:f4:f0:e3:d6:5a:6f:a4:a7:0f:7c:ee:64:71:bd:e1:
d1:c1:62:c1:a7:c3:67:a0:fc:5a:41:24:29:96:f9:00:d6:d4:
46:aa:74:e7:ea:f5:65:66:69:6a:d6:80:91:f4:a4:67:b2:2c:
dd:74:bb:a7:f2:29:c0:3f:1c:da:71:dd:d4:c5:b2:9e:68:e1:
b2:cd:3c:02:e0:4f:06:0a:f9:cc:9f:7b:f5:80:32:03:5b:60:
fc:42:da:ed:fe:35:70:fe:95:3f:9f:b4:0a:fa:1a:fa:2d:28:
21:b9:c5:e4:97:e4:0f:02:10:6a:09:02:2c:de:8c:33:70:52:
bb:25:47:4a:3e:43:55:2d:c2:97:06:79:9d:f2:1e:d6:28:8c:
61:70:c3:d7:bf:09:75:25:4a:cc:b5:f0:b9:5f:ba:72:c0:10:
3c:d8:b2:ff:3f:08:de:96:5f:0b:cc:a4:0d:04:1e:85:b1:7e:
0c:4d:0d:ec:d8:30:38:ac:f4:58:9a:25:8c:4d:76:3b:78:30:
7e:86:91:49:c1:31:b6:72:74:ea:98:ee:f8:15:e6:27:03:ad:
12:24:a0:b7:6d:35:4e:f1:7f:be:5d:09:09:46:33:ac:be:9d:
99:81:36:3e:7c:e7:26:8b:e8:7a:55:45:69:29:79:0e:71:0b:
83:07:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:41 2025 by rpki-client