Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd0bdc29-040b-38b2-8ceb-2fe715115d2f.roa
File: dd0bdc29-040b-38b2-8ceb-2fe715115d2f.roa (raw, json)
Hash identifier: 1fcstdY8dbKq5c7L4N92KqbuIOntcFLgfP1cff3r82g=
Subject key identifier: 1C:7B:59:51:B9:DA:48:D7:C3:FA:F9:17:B0:90:B8:51:62:1A:CE:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C447F7F7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd0bdc29-040b-38b2-8ceb-2fe715115d2f.roa
Signing time: Wed 19 Dec 2018 02:25:10 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=bc862c19-68a3-4f90-903e-724f50c111d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:cb:81:59:87:f5:2f:1b:dc:f7:5c:6e:8b:
b2:90:62:45:d8:e9:64:b2:ce:94:e6:5c:ea:9c:23:
e0:f4:06:e3:54:cd:57:0e:18:70:00:7e:2e:13:47:
8b:f0:15:62:f1:a1:c2:88:53:e2:b5:52:83:2d:17:
55:1f:42:1c:7a:a9:b2:4b:28:18:a5:05:ac:fe:ef:
36:6b:6a:b6:2c:38:b7:d7:92:16:b8:2e:49:59:f2:
6f:0b:fe:51:4f:ac:34:30:b8:82:53:ed:73:3b:fe:
36:0b:66:ec:ec:cf:54:d2:62:a6:8b:99:99:3e:93:
d7:49:fa:a6:fc:d5:e0:48:91:a8:7b:3e:65:aa:38:
78:99:7b:4f:7b:47:4b:cb:3f:67:e7:2c:2e:ff:34:
e7:6e:f1:2f:58:4c:17:0b:0f:23:7b:19:70:a5:17:
34:52:ec:29:24:ca:ab:5c:75:bc:fd:da:fa:58:3d:
3a:07:35:68:73:35:c4:2f:d4:f8:ea:08:55:2c:45:
33:76:09:8b:7b:0a:b1:3c:4f:84:f2:18:85:3f:f6:
5e:cf:96:da:5d:5d:7e:fb:59:f3:43:66:1b:18:ac:
f6:20:77:c9:1c:6d:0b:aa:7c:4b:48:81:21:1c:25:
bd:e5:83:fc:ad:61:1a:be:21:af:35:5e:c4:92:40:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:59:51:B9:DA:48:D7:C3:FA:F9:17:B0:90:B8:51:62:1A:CE:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd0bdc29-040b-38b2-8ceb-2fe715115d2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:e1:0a:4d:67:34:33:c5:93:27:81:df:dd:61:07:1b:48:64:
61:55:33:22:76:ef:54:63:b1:79:83:20:7d:9d:79:08:3c:84:
44:3d:ca:61:bb:73:9d:da:41:c0:bb:f6:ad:5e:52:cd:63:cc:
c1:16:ce:34:4a:9a:a0:8a:d8:e8:87:08:04:14:3f:c0:00:0d:
66:bd:e8:b4:1f:d7:45:5c:31:5e:52:c8:59:a2:e5:95:92:c9:
04:f3:7d:a0:3c:0c:19:f8:41:7a:c6:75:06:96:69:14:dd:eb:
98:fc:ad:46:16:26:cd:54:9e:3e:56:62:43:84:2b:f6:46:56:
ba:71:ae:d5:56:ca:9c:62:f9:19:6b:c1:ce:6f:e4:ae:c5:d0:
16:c3:fb:5d:7e:ce:5c:62:fc:32:73:6c:13:eb:4c:00:6b:b2:
68:77:a8:de:cd:c2:bc:d5:2b:dc:2a:61:b1:1d:1e:22:d5:20:
61:28:c3:57:57:7a:76:bf:25:99:45:08:bb:e9:78:a3:0a:a6:
3f:01:11:3c:9b:e7:d6:7f:5f:2c:96:78:62:ea:61:da:cc:8d:
32:9f:e3:de:31:ff:94:bd:02:00:1c:be:25:58:07:83:19:e5:
21:83:ea:48:b7:3d:0a:93:ca:bb:1d:89:ac:76:ac:e5:27:eb:
c9:c3:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:41 2025 by rpki-client