Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd633e10-9a18-3bb5-904f-978c41abae90.roa
File: dd633e10-9a18-3bb5-904f-978c41abae90.roa (raw, json)
Hash identifier: a7Nreoef7xxBYE1/UpqMxDHHw9lDbWcPf7KkeYAxhnI=
Subject key identifier: 10:DD:8C:E4:62:F9:39:A5:DB:D7:6D:AD:08:87:05:A6:73:1F:62:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4483BFF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd633e10-9a18-3bb5-904f-978c41abae90.roa
Signing time: Wed 19 Dec 2018 02:25:27 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:48:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=3093b23e-c2b5-4ce5-8188-0bfecef4aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:9b:93:a4:b3:78:0c:39:48:a0:1b:8f:17:
7c:89:1f:d1:5d:4e:4e:36:40:6a:a1:cd:04:ab:39:
79:63:26:e3:f6:a9:bd:00:fd:95:51:04:30:64:81:
e8:a0:a0:26:e1:20:ca:55:e3:03:ae:ef:65:2a:85:
20:34:8a:9b:76:53:95:5b:4f:ac:57:28:82:9b:a0:
c7:03:d0:23:a9:88:61:74:2d:4b:80:fc:08:de:6b:
16:84:ec:42:8f:4c:16:fe:df:b1:96:38:ab:4f:e0:
18:5c:d9:00:b7:4a:ec:aa:11:54:85:58:75:5d:a1:
5d:6a:46:e0:32:68:bf:11:75:5a:50:00:26:8e:6e:
ec:d3:55:ec:a5:d4:06:37:62:3a:f7:72:a8:5b:84:
dc:27:df:f5:bf:08:b5:5f:f3:14:b1:7f:5e:fd:44:
f8:23:42:47:da:7b:45:8a:0a:9f:d9:2f:54:2b:83:
0a:51:7f:ed:6e:18:cb:5d:fc:7e:9d:d3:d2:b1:6d:
b4:e3:2c:0e:9d:25:10:07:b4:0d:21:d4:9f:e5:09:
7f:48:ca:cf:0e:8c:a6:92:24:23:f8:4a:98:90:77:
2e:45:3d:b0:6f:18:88:2d:7c:f5:22:32:5e:ab:ed:
89:63:d9:0f:10:b7:a7:05:8f:7f:dc:ff:03:7c:f1:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:8C:E4:62:F9:39:A5:DB:D7:6D:AD:08:87:05:A6:73:1F:62:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd633e10-9a18-3bb5-904f-978c41abae90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:68:d3:99:8b:97:fa:5a:5c:72:01:6a:15:1c:05:ce:20:f1:
96:6f:58:1a:0c:7d:c1:64:31:94:f0:0f:47:d2:ca:6b:98:be:
1f:fc:35:84:56:70:24:6f:85:a1:b8:77:96:c3:64:54:65:25:
39:4e:81:cc:bd:6e:51:39:2b:80:cd:8d:26:eb:7f:38:e7:0a:
2c:05:d0:8c:5d:2b:a7:ac:97:4e:6f:42:b6:a5:09:a0:29:8d:
06:5c:9f:eb:5a:b3:1a:5d:c0:16:c7:27:e5:da:ff:d6:cf:40:
9b:72:ea:84:0c:e7:1e:f9:e1:a9:c6:d3:35:f4:87:f0:e9:73:
38:99:79:9b:16:e5:74:f2:60:2e:32:2c:a9:c3:1f:7e:37:86:
54:59:f1:11:4e:e5:76:52:7d:de:d0:cc:d7:3f:ad:31:c1:c9:
00:9b:44:55:1e:16:96:85:26:c8:ea:5e:1b:6e:3e:e4:83:ba:
61:0f:a3:b7:f6:67:63:59:3d:51:6d:eb:70:a3:44:00:4a:a8:
e3:7d:e2:6c:51:ec:22:2c:b8:c9:be:53:0f:aa:d7:00:c0:f8:
32:a2:34:58:df:2e:06:9b:79:96:0f:7c:16:7d:cc:ab:f8:bd:
28:8a:1d:ba:32:14:3f:bf:44:04:a8:7f:47:d3:b5:08:5e:52:
41:ea:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:55 2025 by rpki-client