Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db22bff4-87f4-3fe0-aa64-d5968a026895.roa
File: db22bff4-87f4-3fe0-aa64-d5968a026895.roa (raw, json)
Hash identifier: rHQvY/6jpLzQsEp4cFOhBbmHsb1b25D1KGyvcTDiPVo=
Subject key identifier: B2:09:21:CC:19:90:3F:48:37:98:D5:02:95:A4:7C:83:5E:DD:DC:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3945C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db22bff4-87f4-3fe0-aa64-d5968a026895.roa
Signing time: Sun 21 Oct 2018 08:17:46 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.219.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=27849d3f-77b5-4e3f-97a2-406ac40bd41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:3b:5c:ca:76:d2:16:f4:9c:11:30:5b:a1:
3f:c6:00:c0:cd:bb:9b:19:8b:74:1f:03:2f:65:5f:
36:ce:85:a6:89:f9:09:95:1a:a3:4e:ce:7e:90:fa:
ea:2d:9c:5d:9d:b1:af:7e:19:e0:f2:a1:b7:87:92:
c9:5b:18:6b:55:a3:87:bf:b6:5d:94:df:f9:82:ca:
b2:29:5e:a5:d6:11:62:8c:2f:1d:f7:20:c3:e0:81:
af:68:05:95:69:19:62:7f:4b:45:63:fb:22:79:5a:
6d:5d:49:4f:18:4a:82:71:50:bd:a0:02:52:1a:4d:
25:24:54:2b:17:48:31:f5:fa:85:8b:8c:f8:cd:97:
ee:cb:05:6f:e1:c3:25:9b:09:4c:d1:ba:fe:cd:15:
ee:7e:49:d7:00:43:b5:44:74:3a:c7:44:9b:f8:71:
42:5c:1a:0e:e5:1d:bd:be:7b:54:62:4b:ad:40:e2:
e5:a3:d3:9e:f6:e8:9b:f4:43:e4:46:39:c3:0b:c7:
83:cc:f6:49:9a:ed:d4:85:75:79:b0:0b:bd:6e:6e:
38:65:fe:d2:40:c8:45:65:37:e8:28:60:84:d5:3b:
5b:35:f6:e0:8b:84:40:72:b9:f3:9f:a0:66:f3:23:
11:58:83:59:d1:bc:4a:84:9d:be:e9:7c:46:0e:4f:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:21:CC:19:90:3F:48:37:98:D5:02:95:A4:7C:83:5E:DD:DC:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db22bff4-87f4-3fe0-aa64-d5968a026895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6b:b9:f5:ce:4d:6b:68:fa:a2:a6:1e:6b:65:70:fc:3d:90:
62:fe:f1:3e:d5:10:6c:32:4e:64:44:0f:df:09:a6:6e:8a:fa:
8c:15:3d:27:47:e1:44:42:83:42:8c:b2:1d:41:32:2d:1e:8d:
27:0e:ef:37:f1:4a:53:a2:0c:8c:8d:4b:da:16:3e:e0:65:a0:
8a:bb:5b:4c:02:34:a1:c8:8d:98:7b:34:ae:7d:1e:32:85:08:
1d:84:79:41:63:74:d6:d7:71:ec:ee:07:75:c2:cf:36:f2:15:
b3:ca:68:84:2c:5d:79:73:21:77:e7:a9:9f:d3:2d:6b:e9:7e:
e5:6d:6a:63:ec:2c:7f:10:64:58:f2:1c:c4:ed:1b:00:0a:34:
78:29:f2:36:6f:fb:30:f7:19:12:e6:07:f7:73:88:22:81:cb:
5a:05:9f:cb:b4:a2:2f:07:fc:5d:f5:31:9b:fc:c3:86:cf:6c:
ca:f2:93:34:a1:0c:cd:6e:3c:d9:cc:a5:0e:df:0f:81:c3:e0:
62:6e:d6:de:b7:ea:5e:16:dd:ff:04:22:5b:e9:c7:75:64:39:
09:03:37:80:3e:75:cc:a9:12:21:98:0a:3b:24:78:24:2a:c1:
1f:5e:10:32:73:ab:f4:30:a0:a8:44:5e:50:06:26:40:d7:0b:
31:1c:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:48 2025 by rpki-client