Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c58443ee-ab16-34ed-8f3a-125b1f28b9d5.roa
File: c58443ee-ab16-34ed-8f3a-125b1f28b9d5.roa (raw, json)
Hash identifier: uctxJKB5JLS26SFfhv3bb3ASqwVovd7ySDbdGDK3y60=
Subject key identifier: 71:4B:A6:C8:23:2C:1F:A0:7C:88:96:33:0A:EF:BF:23:07:98:70:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50B15F2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c58443ee-ab16-34ed-8f3a-125b1f28b9d5.roa
Signing time: Wed 19 Dec 2018 05:58:17 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=3b4b7da3-c82d-48f6-8a2c-440415b2eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:02:a1:84:63:b3:60:d4:19:ed:6f:1b:39:
48:d7:d7:e0:d9:88:a2:7c:ab:b4:ef:cc:20:85:03:
ca:f1:7d:58:09:64:1c:21:34:29:7d:02:77:95:f9:
59:8b:57:3a:1f:0e:49:6d:ac:51:ac:c8:9f:11:ea:
91:fc:34:35:68:e9:3b:c0:d4:e5:6c:74:a2:8d:36:
1e:bf:48:c6:54:4d:61:22:5d:4d:09:75:46:cf:e1:
e5:3d:97:48:db:71:44:dc:ee:c9:ba:0f:f8:1f:da:
a7:ba:07:67:8a:ac:bc:07:ac:b0:68:bb:91:cc:26:
d2:14:e8:e7:79:e0:7c:33:15:6e:29:d4:88:42:ff:
17:6e:ca:c1:b8:af:8c:34:72:95:43:79:4c:34:09:
04:5a:1c:4b:93:4a:6d:2e:8c:53:9f:64:3a:32:85:
04:08:37:b9:65:3e:81:ca:f1:c1:84:78:ac:3f:a7:
49:47:60:cf:91:fe:a3:57:41:e6:28:a6:4d:86:24:
e0:43:6f:70:9f:a4:c7:fc:fc:b7:cc:0a:f9:03:f8:
b1:20:dd:1b:51:33:f5:bd:b8:a1:29:ae:86:b4:9c:
3b:5b:5b:03:d9:93:09:bb:b3:52:89:f0:65:58:8d:
7a:35:60:96:cd:5f:3e:7f:5b:db:12:48:e5:19:56:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:A6:C8:23:2C:1F:A0:7C:88:96:33:0A:EF:BF:23:07:98:70:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c58443ee-ab16-34ed-8f3a-125b1f28b9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:cb:c3:4e:b2:19:47:d5:64:64:60:f5:db:36:bb:b3:98:af:
74:2d:ce:ff:63:87:3f:9a:b2:86:5e:e8:1c:ba:5e:af:48:9b:
ab:eb:a0:72:d4:7a:1e:6d:85:22:b9:1a:4d:74:98:4e:0e:9b:
60:f6:00:07:65:cf:d6:23:bd:54:f4:f3:0b:5e:05:f0:21:26:
8d:68:e6:31:2e:d3:aa:13:4c:a8:ce:ee:17:0f:e5:8b:16:aa:
06:9f:23:2e:8f:d8:32:2d:72:88:12:04:16:5f:51:e7:86:de:
0d:dc:6f:a0:e2:32:df:73:13:53:9d:f2:e3:d1:99:ce:9c:9f:
b6:0a:dd:55:5e:61:45:de:3a:4d:e3:ee:bf:a1:03:13:76:f8:
a5:a0:68:fa:08:c2:da:6f:69:ce:14:1f:84:9a:80:e1:f5:81:
7f:9f:0a:00:23:2b:bd:6e:9e:34:71:39:63:a5:48:17:b0:2d:
8c:d5:4d:fc:f8:2d:27:0e:04:22:58:81:e0:24:6b:98:51:e7:
c3:86:47:90:66:f1:a9:b5:44:b0:7d:71:01:ad:e9:dd:d9:a1:
2e:08:dd:b6:38:36:9d:77:c8:67:70:4c:c7:4d:ec:c0:57:05:
8a:35:71:5a:a2:82:05:47:30:2e:ba:15:6f:ed:54:f8:1f:3d:
e1:06:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:48 2025 by rpki-client