Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1470920-250f-3a01-b90d-a890888a801c.roa
File: c1470920-250f-3a01-b90d-a890888a801c.roa (raw, json)
Hash identifier: zwWAUR6Ij2xqpRkhT8ntKuFr48j04f7qiZNgiYkJZzk=
Subject key identifier: 3A:D1:D6:44:50:AB:C5:45:0E:82:71:40:09:46:57:A2:54:1A:22:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A6D42C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1470920-250f-3a01-b90d-a890888a801c.roa
Signing time: Wed 19 Dec 2018 04:08:46 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a6:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=9dc209cc-c8ae-4d0f-8b5c-560a11154868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:45:f7:2f:56:5f:c7:c6:19:75:3e:50:9f:
6d:49:da:11:43:20:a2:3f:a8:b4:41:a9:a0:33:95:
5f:3a:9a:9f:3c:1c:62:0d:62:50:f5:79:62:c3:0a:
0b:d1:9f:f3:41:0c:3c:49:a1:38:92:e4:36:82:75:
76:09:f8:ef:b8:76:17:b3:50:15:81:3c:a3:7c:e7:
72:d4:22:b6:3f:26:9d:f8:4d:09:c0:59:30:8b:f0:
73:f8:05:6c:42:cd:3e:7c:ae:ec:7b:9c:bd:5c:25:
67:ac:de:60:f2:5c:54:4f:44:2c:f9:37:d3:74:60:
5b:c0:44:0c:7d:b4:8b:4a:49:5e:e2:b2:81:6b:97:
a8:0e:d2:82:43:f7:ce:27:b7:8a:b2:bb:97:c8:7c:
66:b2:90:b7:b9:e1:9d:74:76:61:ad:ed:7d:96:34:
ec:0b:c8:d2:39:96:1f:72:77:37:5d:bb:59:e5:bc:
81:16:30:93:c0:ed:f6:93:16:56:6c:4a:39:9f:ce:
9e:8d:30:79:7c:fb:90:bf:8a:4a:8a:64:37:09:4c:
fd:50:39:5a:e3:fd:cd:3b:80:c5:7a:d1:d7:4b:4e:
f2:d4:16:68:85:1b:80:ab:8e:93:4d:9f:40:1c:20:
cd:a8:00:bc:d9:11:f2:a3:f1:48:a0:65:ff:d1:bd:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:D6:44:50:AB:C5:45:0E:82:71:40:09:46:57:A2:54:1A:22:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1470920-250f-3a01-b90d-a890888a801c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:ff:e9:ec:a5:f1:e2:c1:78:6a:bf:27:56:d0:f7:e1:97:06:
53:5f:78:a1:35:b5:86:4b:9e:b6:21:68:2e:f6:19:f6:b3:4f:
d4:5d:6f:cb:0c:b5:45:71:50:59:12:e4:5c:2f:da:cd:d1:42:
05:fc:92:0c:ba:ea:d9:47:49:7f:26:fb:6d:67:5d:f3:73:45:
cb:2e:2e:d0:9c:ec:cd:43:43:b2:d0:14:94:67:10:04:f2:43:
35:f0:2d:bb:67:a5:e3:c0:86:6e:9d:e7:85:6b:4a:3e:0f:2d:
8b:0d:2a:b4:53:d2:82:71:bf:24:31:0d:d4:91:54:b9:42:3c:
fa:f1:a7:ac:54:21:a9:7e:a5:4d:a7:62:b3:30:01:69:43:68:
c6:24:ec:7c:dd:9f:5b:39:ca:2b:9c:94:78:bd:18:e4:a2:68:
3f:fa:31:94:a2:8d:08:a1:01:de:e8:3a:1c:c1:05:8c:84:c0:
3f:9d:1c:3c:46:de:93:b8:8f:ea:b2:8c:29:13:ca:18:c8:25:
92:5f:fc:2e:7a:01:d5:46:a9:db:ab:36:68:80:3d:5e:02:e2:
79:46:f9:7d:d5:fd:c2:4e:c7:db:71:58:9d:50:8a:22:ed:e9:
01:74:5f:d0:88:48:48:05:73:39:aa:a6:ce:7e:3b:dd:94:5f:
02:f7:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:59 2025 by rpki-client