Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca8f4898-dc02-3301-bbaf-ee9fb310e02e.roa
File: ca8f4898-dc02-3301-bbaf-ee9fb310e02e.roa (raw, json)
Hash identifier: FP2df5q5ECAZiYXwvzy8YoVbM7dwGPxTp7riRSR+FjI=
Subject key identifier: FE:01:06:A2:08:3D:C0:84:75:3A:6A:3A:D6:B0:C7:6B:91:8C:0E:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A729F5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca8f4898-dc02-3301-bbaf-ee9fb310e02e.roa
Signing time: Wed 19 Dec 2018 04:09:08 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=5d0be715-6333-4c44-8542-5a0c1a1ec176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:d6:3c:64:a6:f2:49:cf:42:22:f5:ee:14:
90:08:5e:b6:f7:63:17:8f:1e:b4:73:20:d1:ff:6d:
c8:12:1e:de:e8:b7:8e:57:1d:0f:d5:d4:32:80:80:
7e:0f:24:21:8f:a9:fd:fd:1d:0a:74:5b:8c:48:2d:
6b:82:5c:fa:76:dd:98:9d:fd:f4:7e:51:47:b8:74:
dd:f9:b4:16:89:9a:1b:e6:80:2a:ca:37:85:e5:5d:
cb:f1:f9:83:ef:ad:21:7c:94:6d:bb:ba:7a:8d:45:
6a:17:b6:ef:93:37:60:af:b7:3b:cd:91:94:fb:bc:
48:00:29:2d:62:d2:07:98:1a:9d:2f:2c:a0:29:9d:
bc:e5:a6:d5:b3:0b:23:d0:69:49:ac:7c:ad:77:82:
94:dc:37:b2:47:20:43:ec:6e:54:67:f0:bc:19:45:
97:de:e8:b8:ba:12:a4:90:02:74:c6:77:01:66:f1:
34:e8:9b:96:8b:64:1b:e8:6c:6c:c3:32:0f:c0:cb:
eb:14:ea:a2:3f:b6:44:65:f2:62:61:a8:b0:42:87:
29:9e:cf:37:62:25:96:3f:f2:54:77:a1:a6:2b:07:
15:0a:c5:9f:df:c5:53:3c:ef:48:39:61:34:a4:13:
c8:cb:46:b0:e8:d0:7a:7d:a0:69:fa:b7:16:1d:72:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:06:A2:08:3D:C0:84:75:3A:6A:3A:D6:B0:C7:6B:91:8C:0E:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca8f4898-dc02-3301-bbaf-ee9fb310e02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:26:72:f5:53:1a:a9:af:79:d4:50:b7:53:05:91:b8:a6:0d:
a0:e8:37:ef:8b:39:07:cf:1f:a4:27:cc:ed:28:14:68:4e:eb:
5e:9a:89:b3:de:f4:2b:4e:22:cd:07:a1:d3:d5:b2:dc:d0:b0:
a2:ca:6a:42:ee:f1:73:22:0f:64:08:e6:b5:0f:c4:e2:2f:8d:
e7:ca:fb:03:e4:95:fa:41:93:6a:cd:47:c8:12:4d:5b:3a:49:
d7:b3:cd:1d:7e:9d:b2:9a:8b:cd:1e:87:bd:fc:57:88:61:6a:
e6:58:91:55:78:76:da:2e:b4:59:e0:16:4b:1d:34:30:d5:29:
9b:90:25:cc:8a:6c:dc:e3:c6:11:f5:e5:0d:e5:24:7b:39:35:
d2:4d:01:fe:b0:82:33:8d:1b:c3:ed:38:43:a4:88:37:ad:c9:
ef:d1:7e:1e:d5:c7:2e:c8:03:69:39:c8:7e:42:f8:f1:32:f1:
38:48:67:96:39:be:c5:ef:bb:7c:9b:e3:4a:63:6f:6a:f7:6c:
92:7f:52:e6:32:42:be:52:68:ce:e4:52:34:17:e1:5f:f8:14:
ef:37:c8:f1:29:57:1b:e9:27:5e:16:dc:68:45:83:fa:b7:ad:
66:f0:c0:55:46:8c:00:4d:65:25:99:0a:2d:54:8e:eb:3b:26:
ad:9a:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:33 2025 by rpki-client