Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce5528e-3a2f-3fe2-bd98-296e5a1123c9.roa
File: bce5528e-3a2f-3fe2-bd98-296e5a1123c9.roa (raw, json)
Hash identifier: m4tv0yzkeg8COazu05l1uS9JClPe1Ov8SO6qR5Nwabg=
Subject key identifier: 77:96:31:71:19:63:41:68:34:02:9B:7A:91:7F:21:2C:A0:60:D6:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD4FA2C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce5528e-3a2f-3fe2-bd98-296e5a1123c9.roa
Signing time: Wed 10 Oct 2018 07:15:53 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=db2d2e9a-7838-4df9-a204-1132be86ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:e7:db:0f:8e:da:46:1a:7f:58:9e:39:78:
2e:30:ec:a0:fb:ac:c9:dc:24:04:cd:77:f5:2d:78:
86:e5:86:3b:6f:87:ef:4b:c5:b5:17:cf:75:d2:67:
6d:3e:44:56:2b:49:11:fe:d5:c1:08:2d:08:89:e1:
84:67:2e:04:80:e5:3f:c8:ba:7a:d0:03:fa:ee:f2:
40:28:20:41:48:73:64:bf:4f:7e:1f:01:d6:2d:8b:
ac:c8:1f:b0:ae:61:35:04:81:c5:d2:c0:d7:00:3a:
2e:0a:c9:ec:f8:14:7f:ae:f3:61:64:45:1c:96:7f:
34:a6:d6:59:c1:49:c6:06:39:87:de:c9:bc:23:2d:
41:5e:ed:fa:97:94:60:26:48:b3:e7:80:ab:8a:64:
9a:72:c9:ea:84:52:27:0b:ed:6c:03:71:8e:36:57:
ae:c6:0f:58:3d:23:0d:e9:d6:f6:81:86:61:47:a7:
80:89:ce:4c:e1:b8:fa:29:4a:9b:c0:f5:b9:2a:f8:
3e:9a:f3:b8:df:b9:2d:6b:a8:00:e0:f5:49:89:4a:
7b:1b:a7:8b:25:31:39:a1:11:9a:03:3e:fe:7d:e0:
8c:50:25:10:23:5e:f9:4b:11:62:0a:0d:20:ac:41:
47:b9:39:06:bf:32:21:34:95:33:3b:0f:84:89:df:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:31:71:19:63:41:68:34:02:9B:7A:91:7F:21:2C:A0:60:D6:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce5528e-3a2f-3fe2-bd98-296e5a1123c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:b7:b4:84:46:9e:f4:07:4c:2f:1a:56:75:aa:fe:ff:80:b1:
de:41:79:e6:08:f7:d5:44:14:f0:15:74:b2:e6:4c:6d:77:9a:
44:d9:7d:af:dc:44:66:ae:2b:a6:1e:64:f2:82:62:a5:17:f5:
d1:5b:fb:0b:a4:50:19:c1:9d:83:76:cd:0a:75:0d:aa:a7:29:
51:f6:6d:6c:c5:48:5e:70:63:a7:0d:1a:b3:59:87:21:b6:6c:
f2:68:33:b8:f9:e0:90:40:7d:3f:29:b7:74:2c:5b:91:36:ec:
f8:30:35:13:98:4b:19:f1:d0:9b:13:b8:9f:7e:80:dc:d9:92:
a1:b9:a1:ec:80:aa:c9:ee:ea:15:36:55:f0:0b:1a:7b:6a:71:
a3:fd:96:58:32:a0:5b:a1:77:a2:ea:49:af:ae:b8:10:15:79:
3f:c4:07:c7:09:14:50:b9:ed:05:dc:87:b5:bc:9f:df:ae:12:
99:4e:b9:9f:e8:e5:34:fd:14:d4:84:87:8b:b8:77:cb:e0:b2:
56:9c:77:84:0c:04:56:f6:b7:ec:b4:46:9b:1f:04:62:b6:99:
00:53:74:24:dc:dd:cf:76:79:a8:04:f1:16:7e:6f:39:8f:61:
88:1c:9a:fb:6f:03:4f:bf:84:02:f5:0a:e9:c3:e9:bb:a8:e3:
36:ed:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:32 2025 by rpki-client