Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aeede223-7d23-300c-a52e-723a6277b41c.roa
File: aeede223-7d23-300c-a52e-723a6277b41c.roa (raw, json)
Hash identifier: 5oKOEsfsJH2t+pWklKvzQRjo2meVHlMY0I5hyEx7qgg=
Subject key identifier: AB:C7:92:5F:C6:0F:34:3F:34:D7:4F:00:CC:88:43:5E:3B:16:34:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3E145
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aeede223-7d23-300c-a52e-723a6277b41c.roa
Signing time: Sun 21 Oct 2018 08:18:05 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=94f99f02-fcf9-4078-8ff0-8ec0ab740bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:fa:bf:f0:56:9e:fb:35:66:8e:b6:04:15:
08:de:16:75:99:b7:ef:2b:bd:cb:f9:0d:46:7d:ef:
3e:04:e2:07:6b:db:71:2e:77:ce:59:e1:89:02:2c:
b8:7d:11:c7:b5:f0:15:50:f3:20:2e:b1:f3:85:d3:
3f:04:3d:3a:61:0a:4a:c0:e8:d1:ee:ef:37:2b:5f:
23:e2:9f:b5:af:44:69:fd:f8:4e:e1:ba:f7:94:14:
29:58:94:d8:a8:1a:64:f1:d1:95:9d:0b:01:98:86:
c9:d7:2c:a0:b2:e9:44:0b:1f:3e:c1:5d:d5:26:f5:
7f:cf:6c:bb:9a:e8:16:9e:14:5d:5d:8b:30:89:09:
98:b9:c8:b9:a9:b1:b5:2c:97:03:53:ac:99:e4:2f:
37:15:c2:7f:0b:06:4a:b4:01:30:2b:0c:7f:c6:c4:
60:98:c3:d0:00:7b:f7:7e:74:7c:6e:ee:c7:3b:e8:
32:13:dc:e9:b1:18:66:68:39:e7:29:e6:9f:21:9f:
bf:d1:9d:bd:51:fb:76:57:bf:86:a9:15:a6:dc:13:
b5:62:f6:54:51:4c:41:b1:f6:d3:f6:3f:01:df:4a:
74:75:41:03:ae:dc:71:8e:d8:c8:e5:45:ad:db:bf:
fc:d6:ee:71:9d:38:92:06:9b:5e:5e:4d:12:24:f3:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:92:5F:C6:0F:34:3F:34:D7:4F:00:CC:88:43:5E:3B:16:34:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aeede223-7d23-300c-a52e-723a6277b41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:33:40:14:ce:08:df:fe:ff:de:f0:9e:08:1d:c9:c1:9b:b0:
15:a0:6b:97:48:65:8e:3b:a7:3d:ad:dc:8f:d8:44:0a:52:51:
6b:4d:fd:f6:9d:ae:35:40:cf:0a:b8:e2:c2:55:bc:6d:34:a3:
1f:d2:b6:91:91:6d:df:9d:63:03:66:64:cf:45:b6:ef:cf:ac:
e8:5e:bf:46:10:f6:a9:02:ae:4e:24:79:8d:af:ef:25:7c:2a:
6e:e1:6c:91:4e:bc:fa:45:38:33:ff:3f:cd:31:0d:dd:8b:8f:
db:71:0d:9d:f9:30:80:b4:ba:7a:41:af:82:bd:0d:ef:2c:65:
ce:e8:8f:18:4f:ec:89:8b:04:81:00:24:82:68:12:84:a9:11:
df:23:c3:20:37:ac:2d:e7:79:68:75:a9:ea:26:a3:57:ce:b5:
74:ff:87:fc:df:ac:eb:ad:a6:90:fb:2e:e6:44:95:08:17:05:
c3:7d:37:c3:ed:97:f4:3c:68:8b:f2:91:da:b5:a9:7c:af:b4:
24:2f:08:76:8a:77:a1:6e:16:3e:29:35:be:8b:3b:ae:68:ec:
17:84:e7:8b:80:92:f7:e2:e8:b8:04:25:96:44:3c:42:93:b3:
ad:2b:f8:0e:0d:9e:2b:5d:5c:76:7f:79:e4:f0:6a:7f:8f:9e:
80:91:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:29 2025 by rpki-client