Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ae8828-d449-3a16-b696-841f5fb867be.roa
File: d1ae8828-d449-3a16-b696-841f5fb867be.roa (raw, json)
Hash identifier: Ww7GTITxxCAmoJktHY6Hvu6BCxe+auwUNUVodkQzTCE=
Subject key identifier: 1F:25:7D:FA:3A:2E:9C:BE:20:46:9B:1D:79:00:07:48:5A:60:5E:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A705A9
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ae8828-d449-3a16-b696-841f5fb867be.roa
Signing time: Wed 19 Dec 2018 04:08:59 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=0f57762f-3b1c-40b3-9d4c-df8cfe6a19b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:b6:bb:57:9e:a2:83:0b:1a:a8:6d:b4:26:
8b:b7:18:d7:8a:08:61:d6:86:de:14:52:56:3e:b9:
2f:9c:97:cc:c6:33:c7:21:68:30:d0:94:3b:d5:8b:
1b:c2:53:4e:d7:b9:09:04:bb:2d:d6:86:a2:91:9d:
c8:23:d4:b9:7b:b3:dd:82:6e:25:b9:fc:f3:3e:a3:
f1:d8:ed:25:80:2a:f4:34:82:c8:6e:2e:4c:b3:38:
20:dc:87:89:08:e6:7e:1f:1c:e5:4a:98:43:dc:69:
67:38:68:65:10:13:d5:97:bc:c5:28:bc:62:7f:e6:
7a:a3:9d:c3:d7:0a:31:2d:29:dc:e5:c4:eb:08:ff:
d5:3e:0d:be:ba:b0:5a:17:20:03:07:de:b8:5e:bf:
a8:7e:22:0c:cd:d6:24:1c:74:35:4f:e2:50:9a:85:
8e:e0:bf:e9:02:c1:fc:31:2f:c4:1d:e8:3b:aa:b9:
1b:63:0e:97:e5:17:7e:1b:21:73:86:f3:9c:81:e9:
77:08:cc:ca:19:11:52:89:e6:43:d5:ff:fa:d7:12:
ba:55:d9:07:10:90:57:24:66:23:66:47:7e:30:fa:
aa:53:8e:94:c6:71:06:11:83:8f:d2:0c:27:51:c0:
37:10:d8:c5:86:6b:22:46:7f:75:10:88:d8:c4:26:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:7D:FA:3A:2E:9C:BE:20:46:9B:1D:79:00:07:48:5A:60:5E:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ae8828-d449-3a16-b696-841f5fb867be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ff:1b:40:68:d9:99:c5:12:b0:2c:5f:d5:db:3f:74:73:30:
17:bd:4d:4d:3d:f4:66:9b:ae:de:df:90:83:f4:0a:33:06:1a:
82:35:a4:ef:73:60:68:c3:2c:00:88:a6:e2:bf:7e:96:6a:0a:
c9:86:80:bd:49:d8:34:db:b4:88:0e:17:d9:85:c6:8f:80:78:
e8:9c:77:1c:70:ae:45:53:69:c0:c3:64:ef:fd:98:fb:1f:81:
8b:b1:25:eb:27:7b:8a:7b:80:a5:7f:ad:bb:39:ad:bb:d5:6d:
1f:55:7d:53:98:75:86:64:64:67:b9:9c:4e:2f:a5:58:7e:5c:
2c:76:ad:d4:69:7e:47:1b:02:a6:08:19:48:09:32:83:1b:c4:
c5:b5:8c:45:17:68:56:2e:5f:d2:af:f5:99:82:1b:a4:a1:93:
c7:3d:94:3a:aa:72:78:2e:0a:60:95:7b:56:a5:81:0e:0c:08:
af:05:9b:c2:3c:4f:08:56:60:48:37:ea:75:bb:f9:55:14:d3:
19:6f:fc:cb:d3:c4:12:08:2a:81:eb:9b:45:1a:3f:66:77:0c:
3d:ac:89:a6:39:2a:34:99:be:79:1f:ba:7d:e2:b6:5f:7d:e6:
bd:c8:6d:20:75:81:a0:e8:5f:3b:b3:80:f3:8a:5c:5f:68:a7:
18:26:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:18 2025 by rpki-client