Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce7e559d-b3fd-3a73-b7cf-be672f9bdddc.roa
File: ce7e559d-b3fd-3a73-b7cf-be672f9bdddc.roa (raw, json)
Hash identifier: O4IgRXM+8esmLdQgtKTv21yneZNPtqTNzO+gsC6n2KA=
Subject key identifier: 36:47:6E:3C:19:3F:D5:AA:40:2C:27:36:A4:94:D8:82:59:42:F4:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C076585
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce7e559d-b3fd-3a73-b7cf-be672f9bdddc.roa
Signing time: Wed 10 Oct 2018 03:31:20 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.88.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=df7bf569-bb26-4507-ac70-8ac6214f52e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:28:fa:7a:d9:08:76:db:39:78:74:70:08:
1f:1a:b2:70:37:54:ad:7e:ed:22:97:41:5c:42:93:
8a:c5:da:71:12:3b:4d:67:a1:20:87:1f:cc:bc:bd:
48:a2:97:9c:28:a8:a1:12:b3:e6:a2:2e:8e:fa:49:
a5:f9:17:d1:6c:b7:ca:77:4e:a1:cf:20:81:35:4c:
88:82:17:3c:1a:05:df:c8:dc:ff:32:34:b3:ec:91:
85:8c:cf:ae:4c:a6:af:44:49:a3:bd:66:dd:10:50:
4f:b3:b2:fe:d8:7b:af:ed:47:94:27:76:d5:68:cd:
fb:0b:46:be:58:f5:0b:75:eb:e1:56:df:ef:f7:0d:
cb:56:e6:d0:cf:3f:47:88:7c:09:7a:e1:ec:48:fe:
a6:fc:b2:8a:22:37:26:71:26:e4:8d:fa:da:8f:b7:
3f:8a:88:60:8a:d3:f0:b8:c2:21:7c:07:ff:72:c8:
70:d5:73:6a:8a:b8:67:c6:db:47:31:00:d3:60:4f:
cd:9c:d3:26:06:c8:a4:5d:74:e9:8f:9d:8f:46:57:
4b:7c:fd:e8:12:42:c7:1c:f8:af:85:d7:0b:a2:d8:
54:30:06:aa:53:14:c5:99:58:4b:72:9e:2a:39:09:
64:42:f8:6d:64:96:46:b2:a6:4c:a3:fb:34:f0:88:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:6E:3C:19:3F:D5:AA:40:2C:27:36:A4:94:D8:82:59:42:F4:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce7e559d-b3fd-3a73-b7cf-be672f9bdddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:cd:7c:83:b0:ff:97:f1:45:94:f2:22:70:6d:5a:f9:62:df:
41:1f:aa:df:55:30:14:21:5d:2a:bc:0c:a2:f4:00:96:5c:9f:
89:35:98:08:64:15:d3:6f:d2:c4:15:c1:84:63:d4:02:b5:31:
18:5f:40:a9:22:f2:1a:df:17:dc:8f:ca:6d:ff:bd:e2:ee:e8:
4f:a5:48:30:94:b1:6a:d0:97:e0:35:7b:cb:37:5a:94:6a:58:
54:c4:90:e5:61:12:5e:d9:80:b5:36:35:04:e8:47:cb:89:07:
a7:0a:4a:71:41:c0:42:e4:c2:b7:6b:6c:b1:70:9f:a2:a5:6a:
98:fe:7d:3c:47:dd:b5:9f:38:0b:fc:13:7e:03:45:42:bc:3b:
1d:b0:a7:6d:6a:6b:1a:7e:63:1d:be:ba:5d:cc:9b:d2:d4:54:
9c:ec:bb:ab:16:0d:34:42:76:1e:0e:cb:57:08:b4:41:b2:11:
e6:f9:34:13:0f:b2:b2:bb:dd:aa:81:54:f6:1e:6e:ce:1a:91:
d5:40:40:f9:8f:04:da:f0:6d:ad:8e:93:15:ee:dc:3a:19:6e:
0d:a0:82:93:7a:7a:be:89:4a:43:ad:0c:1b:ed:fc:6b:ae:13:
58:1e:d7:ea:90:b3:03:ad:78:d4:b7:bd:14:89:ea:86:5e:42:
fa:d4:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:38:41 2025 by rpki-client