Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4135073-0951-3786-b59c-adb3d6592f5a.roa
File: b4135073-0951-3786-b59c-adb3d6592f5a.roa (raw, json)
Hash identifier: MHxGSvmkBiBz3Vtgk9zIwQIPDz1rdZ5Wg486b/sYVN0=
Subject key identifier: 10:27:31:E8:E6:EF:0A:CB:6A:10:4A:03:FD:5D:2F:82:2E:15:85:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD4B6FF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4135073-0951-3786-b59c-adb3d6592f5a.roa
Signing time: Wed 10 Oct 2018 07:15:36 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=38673f64-2e1f-4355-98cc-17d4d64d1d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:57:7b:e4:0c:5e:49:42:f0:aa:09:14:56:
f7:45:18:4f:39:88:72:b6:a5:ba:6b:1b:54:1c:83:
2e:9c:0c:68:17:1b:fa:21:63:c4:da:cf:58:79:e3:
77:7e:1c:8e:d3:47:74:20:76:38:33:18:dd:74:74:
5a:b9:91:19:a1:97:78:0d:80:53:dc:cd:ac:ea:bf:
8e:93:8a:53:2a:e9:ae:9f:ab:dc:a0:2c:52:a8:29:
fd:ea:cc:c3:6e:ca:ab:c3:6e:fd:6b:5d:db:2f:1f:
c9:81:d2:1e:48:bb:bf:d1:ea:00:22:c8:b9:3a:9d:
19:2e:25:92:7a:bd:d4:7d:24:e4:6b:d7:b7:db:a2:
1b:a9:c5:1f:25:5a:88:d0:17:3d:7a:5f:55:ed:2c:
bf:86:34:64:7d:dc:48:ec:64:15:57:65:50:a1:3d:
e8:48:b7:d8:80:ce:18:0a:0b:08:0f:16:e5:22:d6:
4a:b4:f0:66:f8:7f:3b:61:0d:6e:bd:c3:a8:8c:e7:
6e:6d:0e:68:d9:b7:b6:16:0d:30:3c:94:2d:15:be:
d6:33:e9:e5:be:39:66:f3:8a:1b:aa:77:ce:f8:6d:
01:05:53:15:91:f0:92:f6:17:a8:4b:37:84:e9:6a:
0b:8d:9f:0e:6a:f4:83:ee:d1:73:18:de:a1:73:e3:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:31:E8:E6:EF:0A:CB:6A:10:4A:03:FD:5D:2F:82:2E:15:85:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4135073-0951-3786-b59c-adb3d6592f5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:18:d2:83:a0:ef:69:37:b3:b6:ae:9c:90:5f:5b:3b:6f:4c:
a6:4c:8b:98:80:31:04:16:81:98:49:19:ec:0c:13:97:31:09:
d3:a3:5e:1d:b3:22:28:50:0d:08:44:d7:8f:f4:91:1a:9f:5c:
db:ee:64:dd:55:c4:16:35:4a:d7:f4:c0:d6:09:4d:a6:5e:f8:
41:65:c3:1f:71:23:01:c5:4f:22:7e:0f:7b:0e:ba:89:a6:66:
c0:27:61:b9:da:f1:86:39:a6:06:4a:3b:25:2c:9d:f1:d1:43:
dd:57:10:ef:0c:b6:b3:3b:75:f9:bf:c6:5c:f1:a2:95:1b:d5:
59:a8:14:03:c5:fe:37:fc:e0:11:21:09:35:76:bc:d6:0a:69:
e1:98:56:2a:8b:e1:21:2a:58:96:6f:64:3f:17:52:b1:10:12:
cf:12:c8:13:26:3b:a8:eb:06:32:f7:d1:4e:a4:13:8a:4c:c1:
ec:c6:38:43:bb:f2:38:cb:b7:7b:88:90:db:a5:b3:61:b7:62:
e4:7f:db:89:2c:d4:0b:1a:3f:1b:9e:c0:01:ba:ad:5f:29:79:
e7:6b:07:f6:2e:d1:3d:81:a4:86:ad:b7:fb:52:c6:57:ee:57:
90:56:d6:d2:df:8b:b7:0e:78:3a:32:3e:2e:15:5c:ff:5a:b9:
26:69:6f:55
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlzUtv8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDM4
NjczZjY0LTJlMWYtNDM1NS05OGNjLTE3ZDRkNjRkMWQ3YTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANdIV3vkDF5JQvCqCRRW90UYTzmIcralumsbVByD
LpwMaBcb+iFjxNrPWHnjd34cjtNHdCB2ODMY3XR0WrmRGaGXeA2AU9zNrOq/jpOK
Uyrprp+r3KAsUqgp/erMw27Kq8Nu/Wtd2y8fyYHSHki7v9HqACLIuTqdGS4lknq9
1H0k5GvXt9uiG6nFHyVaiNAXPXpfVe0sv4Y0ZH3cSOxkFVdlUKE96Ei32IDOGAoL
CA8W5SLWSrTwZvh/O2ENbr3DqIznbm0OaNm3thYNMDyULRW+1jPp5b45ZvOKG6p3
zvhtAQVTFZHwkvYXqEs3hOlqC42fDmr0g+7RcxjeoXPj88UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQQJzHo5u8Ky2oQSgP9XS+CLhWF7jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2I0MTM1MDczLTA5NTEtMzc4
Ni1iNTljLWFkYjNkNjU5MmY1YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjTbIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJRjSg6DvaTeztq6ckF9bO29MpkyLmIAxBBaBmEkZ7AwTlzEJ06NeHbMiKFAN
CETXj/SRGp9c2+5k3VXEFjVK1/TA1glNpl74QWXDH3EjAcVPIn4Pew66iaZmwCdh
udrxhjmmBko7JSyd8dFD3VcQ7wy2szt1+b/GXPGilRvVWagUA8X+N/zgESEJNXa8
1gpp4ZhWKovhISpYlm9kPxdSsRASzxLIEyY7qOsGMvfRTqQTikzB7MY4Q7vyOMu3
e4iQ26WzYbdi5H/biSzUCxo/G57AAbqtXyl552sH9i7RPYGkhq23+1LGV+5XkFbW
0t+Ltw54OjI+LhVc/1q5JmlvVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:55 2025 by rpki-client