Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4760c1a-2357-381e-804e-1fd139d20944.roa
File: a4760c1a-2357-381e-804e-1fd139d20944.roa (raw, json)
Hash identifier: 4jQt3SzUWhw+LYJE+clODyWEedgzGu7kUirndQmyX3Q=
Subject key identifier: 83:E3:2D:56:05:0D:3D:07:3A:BA:1C:9C:9C:29:0C:54:CE:1A:6D:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50AE1F6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4760c1a-2357-381e-804e-1fd139d20944.roa
Signing time: Wed 19 Dec 2018 05:58:04 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=3773f97f-94ad-41ae-83f3-69bd7c1cbf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:8d:24:67:e3:14:53:fc:50:d8:5e:4e:a1:
3a:d5:9e:14:b3:e2:c5:b7:85:39:a4:a6:73:01:81:
03:23:c4:25:34:9c:78:64:19:85:1c:45:c7:2a:c3:
00:b3:b8:2c:c3:a7:43:ec:58:e5:4f:b5:d8:ff:0d:
0a:59:01:11:da:eb:27:50:5d:4e:09:7c:bb:06:04:
81:2c:a2:d1:90:64:5e:32:bc:6b:66:be:84:d6:cf:
b4:c2:94:31:69:71:c2:2c:9b:68:00:17:56:89:1c:
5a:91:05:c8:f2:5c:83:09:a2:4c:b2:31:d8:74:85:
ad:d9:59:26:e4:a3:9c:3f:6a:a7:c5:68:c5:e0:33:
6f:7c:f5:b7:83:36:37:8a:70:4d:b0:2f:eb:21:5d:
6c:09:f7:ad:1a:a7:86:40:e8:e7:50:6d:9f:54:a1:
da:c8:de:04:35:bb:4c:8c:9d:af:71:2d:b3:5d:4f:
2b:5e:85:f4:b0:f6:3f:6e:31:e7:2c:c5:79:ef:8f:
7a:e1:9a:4c:86:5b:23:90:be:b7:f4:ab:cd:7c:39:
93:12:4c:ef:f3:94:b6:1a:22:0b:be:a3:95:0b:d0:
10:4c:3b:8f:6d:bf:5f:ed:2a:d7:22:f9:97:80:e2:
08:40:3a:8f:97:ce:20:7e:4f:b1:64:69:37:4f:15:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:2D:56:05:0D:3D:07:3A:BA:1C:9C:9C:29:0C:54:CE:1A:6D:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4760c1a-2357-381e-804e-1fd139d20944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:16:89:2d:25:50:f8:95:ab:45:34:90:70:d8:3d:b3:ba:84:
58:c5:87:cc:e3:cf:5e:fa:cb:55:06:95:0d:b3:f4:f2:1b:43:
49:fb:9a:30:4f:54:53:93:1f:9a:66:e9:a7:1a:e6:12:9e:b4:
ce:aa:31:8f:5a:2a:65:22:39:07:bb:3e:d8:11:a4:dd:d6:91:
fe:ff:88:1a:ee:db:9c:f3:46:1f:76:1a:b8:c0:8f:2c:f8:d7:
34:f4:2e:dc:2f:cf:f5:19:55:d2:2d:0f:df:f3:96:82:70:33:
72:a4:1f:e0:c3:09:d9:5e:90:30:30:cf:76:ed:bc:23:b6:43:
c6:f5:e8:fa:78:13:db:06:f9:65:e6:d6:8b:97:7a:8d:a0:5a:
0b:0c:ff:11:e5:e6:bd:83:fd:d4:9d:5e:28:45:51:a6:ad:df:
1d:dd:34:4f:59:de:52:b9:29:e3:54:f9:a6:98:06:97:da:b8:
0e:6e:01:7c:42:1a:1f:74:95:72:7b:86:07:64:eb:1a:f1:21:
6a:16:8c:fb:c8:9f:46:5c:58:e7:66:a1:bf:af:67:2e:9f:33:
52:42:ed:ed:d6:f5:54:49:52:42:90:8f:7c:aa:6e:cd:95:99:
5e:88:0b:31:d5:b3:3d:42:a2:52:f3:ef:ce:ac:e6:e2:5e:03:
d3:34:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:47:34 2025 by rpki-client