Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6ecc91a-0dd3-3baf-9c59-e5a264edcd30.roa
File: d6ecc91a-0dd3-3baf-9c59-e5a264edcd30.roa (raw, json)
Hash identifier: nii59U7tLoz4RYDRFHP2cPMYPCv5T/80r9VLKz8N6cI=
Subject key identifier: 76:BF:D8:43:43:25:D2:6D:5D:5A:36:C0:A0:63:2C:FD:A5:17:33:84
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3FC65
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6ecc91a-0dd3-3baf-9c59-e5a264edcd30.roa
Signing time: Sun 21 Oct 2018 08:18:12 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=4ae16d1d-2f1c-43fd-9843-e44e36bb17b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:2d:74:be:cf:03:f9:12:49:72:db:b5:d7:
64:9a:ff:e2:91:e3:e7:93:69:e6:2e:65:36:71:cd:
06:fc:c5:1f:d4:89:b6:33:ee:fe:a9:de:c6:f5:dc:
d6:e4:cb:67:19:91:a3:65:e2:03:77:bb:fa:40:c6:
dc:71:77:60:9c:df:fd:ff:16:29:49:6e:55:f2:6b:
bd:99:73:61:a2:ca:fe:95:65:e8:c9:85:70:60:a0:
a5:04:78:3a:a1:4a:3d:b2:5a:02:e9:d4:2e:c2:46:
7b:fd:3c:cd:bc:0c:c1:d2:a0:88:27:20:b1:3d:91:
66:35:7f:e7:ef:de:13:ec:99:62:c9:35:3b:56:b8:
e1:bb:1a:b5:55:fb:33:30:9b:d9:56:f6:3c:e2:91:
46:c8:3d:99:2f:46:46:e4:4e:60:48:6b:db:65:e5:
c0:b6:6f:ca:d6:10:3c:d2:58:17:00:9e:ba:09:c3:
4a:14:ed:47:0f:5b:53:3c:56:7b:d7:d4:6c:8f:b4:
f1:24:c0:4d:f8:3c:52:2c:a3:4c:a9:ae:55:dc:f8:
a3:c4:1c:37:83:8d:8c:32:bc:b1:45:66:05:6e:fe:
52:b2:66:9d:4c:66:e9:4a:85:86:c9:aa:7f:6c:74:
2c:85:a5:9a:b1:02:4b:6a:87:ec:4a:c1:7e:08:d4:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:D8:43:43:25:D2:6D:5D:5A:36:C0:A0:63:2C:FD:A5:17:33:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6ecc91a-0dd3-3baf-9c59-e5a264edcd30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2a:10:77:3a:e1:1e:c0:28:96:04:22:ae:21:6f:df:e8:8c:
38:ac:43:99:7f:bd:29:02:47:b9:3b:28:8c:f9:eb:c6:3d:7d:
ac:df:0e:06:4e:58:de:ba:f3:a5:8a:f3:0b:0d:2b:83:a0:f2:
3b:44:c4:7e:9d:9d:43:f8:8a:45:10:20:51:9c:c3:40:c2:87:
65:e5:23:d1:e0:9c:c4:48:76:dd:17:95:46:11:f9:05:ab:95:
fd:c6:44:e7:15:d7:6d:e6:2a:ed:8b:ca:f5:6a:47:fc:1d:33:
82:1e:15:c6:f6:b8:2e:dc:9e:98:34:10:0b:61:b6:2f:8f:6c:
51:be:86:e5:0f:53:50:9b:a2:08:bd:93:0b:d9:f0:cf:12:29:
95:36:49:97:e1:24:a2:3e:f7:1f:e9:75:a5:62:d0:7a:a1:89:
80:27:31:45:cc:17:07:60:25:46:59:99:42:03:42:ad:a1:e7:
69:57:b1:28:40:68:5c:99:c8:ce:f0:a3:4e:47:c1:cf:9c:dc:
f2:42:e2:3d:b6:a2:0c:4c:93:50:ff:c2:92:e8:d8:82:4e:7b:
88:80:15:ff:18:b9:53:05:36:b8:7d:63:d8:df:c2:aa:de:f6:
e5:f2:55:70:46:6f:d9:c0:52:32:b1:07:df:0b:eb:55:b0:f5:
00:24:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:03 2025 by rpki-client