Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d643a5d2-5a2a-35f7-a0be-8fb74661ddba.roa
File: d643a5d2-5a2a-35f7-a0be-8fb74661ddba.roa (raw, json)
Hash identifier: NXNQ16J6yQXVgLa6dpr9jIS4tYY3HUADYwxIwGdXiBY=
Subject key identifier: DD:2F:09:D4:A3:C4:3A:2E:D6:4E:1A:8D:57:4A:44:51:81:C2:2C:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C491CACA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d643a5d2-5a2a-35f7-a0be-8fb74661ddba.roa
Signing time: Wed 19 Dec 2018 03:45:48 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:ca:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2678d49a-614a-4400-9ba9-4a1993327146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:85:4a:d3:21:78:f4:e8:36:fb:8e:56:24:
eb:f3:ec:10:a7:ec:dc:60:e7:b8:7f:a1:0e:80:7b:
a0:3e:67:44:0c:94:00:fe:72:e6:85:1f:ab:1c:65:
17:21:ec:35:d7:fd:90:f1:40:52:54:d8:e9:e0:5e:
2c:c3:9d:fa:db:22:54:4d:c4:05:b0:d2:0b:82:83:
18:13:d5:f6:ab:56:8a:ac:68:ad:9e:00:79:da:82:
e5:02:e2:5b:f6:08:d8:e2:fa:14:e2:7c:1d:27:d9:
7e:2f:d6:54:90:35:49:9d:20:94:09:d7:f9:c5:05:
d9:b1:4b:25:39:cf:bc:3a:e9:10:54:bf:7f:97:d6:
d0:bd:be:51:2d:0c:ab:4e:da:70:3f:e5:fe:76:2e:
d7:91:bb:5e:50:45:4d:de:d9:8a:44:ab:1b:62:b6:
a0:7d:36:f4:01:62:35:06:95:3a:f8:39:c6:42:df:
32:2e:b9:d7:90:50:d3:10:42:f0:5c:50:9a:5a:b9:
c4:8d:59:41:55:5b:f6:b6:fb:da:c5:84:6d:e9:c2:
03:e7:95:ab:1c:3f:91:77:28:83:5d:1f:7f:a5:5c:
27:85:c9:80:47:bd:d7:5d:11:b5:cc:c3:b6:3b:14:
53:19:1c:3c:ff:46:38:7b:68:5a:91:57:bc:d3:f7:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:09:D4:A3:C4:3A:2E:D6:4E:1A:8D:57:4A:44:51:81:C2:2C:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d643a5d2-5a2a-35f7-a0be-8fb74661ddba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:57:56:c8:6f:66:d9:a0:5a:2e:e0:18:68:3b:d4:f1:7c:c0:
18:53:fc:ab:28:e7:ce:1c:0e:f4:90:bb:4e:64:d9:3b:c2:f3:
4a:ab:d2:4c:f5:e6:3c:e5:3c:f4:e5:45:5c:e0:35:01:b0:f4:
16:b8:f3:36:dd:57:6b:b0:f9:1c:de:32:15:5e:d2:40:84:6d:
f3:51:fe:fc:c3:86:6e:86:93:da:a4:f8:4b:f5:13:97:c9:8c:
da:de:29:e9:75:6c:8c:1a:96:b2:a1:fb:bd:03:47:b1:78:fe:
93:43:06:40:71:ae:ca:a7:77:ce:d9:df:3b:bc:92:fc:f7:a6:
09:ce:5a:47:1b:6f:cf:fd:45:87:b8:52:88:6c:77:1a:05:b7:
c2:50:cb:ec:d5:3a:d8:89:c9:ec:80:d1:25:e8:07:c0:a9:31:
70:62:e7:32:97:21:40:fc:de:25:e6:2b:88:05:83:88:04:9a:
92:d0:75:6d:32:96:97:a3:72:89:46:ce:9c:90:b4:2e:a0:ad:
09:52:35:2c:9e:6b:5f:1a:41:b6:cc:ba:b4:32:7f:3b:34:c8:
d4:6e:bf:df:dc:3f:18:ff:33:d3:00:da:87:20:77:42:2e:29:
34:a2:c6:78:7b:ef:0e:a1:51:ca:8e:2f:24:ce:01:55:7c:d4:
af:68:25:ae
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SRysowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDI2
NzhkNDlhLTYxNGEtNDQwMC05YmE5LTRhMTk5MzMyNzE0NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMxjhUrTIXj06Db7jlYk6/PsEKfs3GDnuH+hDoB7
oD5nRAyUAP5y5oUfqxxlFyHsNdf9kPFAUlTY6eBeLMOd+tsiVE3EBbDSC4KDGBPV
9qtWiqxorZ4AedqC5QLiW/YI2OL6FOJ8HSfZfi/WVJA1SZ0glAnX+cUF2bFLJTnP
vDrpEFS/f5fW0L2+US0Mq07acD/l/nYu15G7XlBFTd7ZikSrG2K2oH029AFiNQaV
Ovg5xkLfMi6515BQ0xBC8FxQmlq5xI1ZQVVb9rb72sWEbenCA+eVqxw/kXcog10f
f6VcJ4XJgEe9110RtczDtjsUUxkcPP9GOHtoWpFXvNP30qUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTdLwnUo8Q6LtZOGo1XSkRRgcIsJDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2Q2NDNhNWQyLTVhMmEtMzVm
Ny1hMGJlLThmYjc0NjYxZGRiYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTa9zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAEVdWyG9m2aBaLuAYaDvU8XzAGFP8qyjnzhwO9JC7TmTZO8LzSqvSTPXmPOU8
9OVFXOA1AbD0FrjzNt1Xa7D5HN4yFV7SQIRt81H+/MOGboaT2qT4S/UTl8mM2t4p
6XVsjBqWsqH7vQNHsXj+k0MGQHGuyqd3ztnfO7yS/PemCc5aRxtvz/1Fh7hSiGx3
GgW3wlDL7NU62InJ7IDRJegHwKkxcGLnMpchQPzeJeYriAWDiASaktB1bTKWl6Ny
iUbOnJC0LqCtCVI1LJ5rXxpBtsy6tDJ/OzTI1G6/39w/GP8z0wDahyB3Qi4pNKLG
eHvvDqFRyo4vJM4BVXzUr2glrg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:59 2025 by rpki-client