Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e209847c-3450-36d5-91e6-22a59fa04a39.roa
File: e209847c-3450-36d5-91e6-22a59fa04a39.roa (raw, json)
Hash identifier: fb5OB+RsNUf7GlSjUW0wIlNZdZMW2PZ3QzpB97cNJcM=
Subject key identifier: 17:C4:3D:D5:65:34:3B:1F:64:3F:78:76:C7:A6:90:A1:E2:21:37:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C49220D2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e209847c-3450-36d5-91e6-22a59fa04a39.roa
Signing time: Wed 19 Dec 2018 03:46:10 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2b3a177c-a719-4a62-a0e1-f00c4fc9bdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:0d:1d:65:bc:ad:9e:18:2a:7b:aa:20:2f:
a9:71:34:57:d5:45:ed:dd:74:58:03:a2:27:27:4f:
41:36:b0:fa:21:7a:7b:ef:d0:b9:05:6b:cf:8d:14:
dc:f6:a8:6f:6b:78:1c:3d:7e:e8:c7:20:59:fd:47:
3e:3a:9a:34:3d:2b:c1:d7:75:c6:4a:af:95:4a:4d:
8d:a3:07:73:87:eb:b1:38:e7:4d:2a:0f:c8:32:a6:
3c:b7:4c:c6:00:e6:59:d0:1d:df:d4:e5:6a:a5:9f:
92:ee:72:61:d5:b9:9a:27:c2:a3:77:e6:65:c1:ca:
32:b9:f5:bd:47:d7:74:80:01:08:ce:85:b9:6c:8b:
0f:0b:29:f5:20:06:17:3f:0f:05:02:42:2d:c9:e3:
7e:37:74:d4:6e:6b:69:db:6c:ee:06:42:89:25:01:
f8:cf:3a:b0:af:fa:4f:64:ee:ed:c9:de:0a:f4:31:
af:51:46:16:0e:af:0f:f4:89:4b:db:23:c5:4e:25:
d8:2c:ef:81:a8:c0:ed:67:e6:4a:a2:a3:06:58:d9:
5a:38:d7:64:a8:15:d1:56:62:95:34:a0:31:8d:03:
5c:ac:f7:bd:e0:1a:f1:49:09:e5:67:36:57:00:8e:
51:75:e6:07:57:47:ec:84:32:df:0f:07:aa:60:fe:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:3D:D5:65:34:3B:1F:64:3F:78:76:C7:A6:90:A1:E2:21:37:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e209847c-3450-36d5-91e6-22a59fa04a39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:fe:a7:25:ba:9c:a3:c2:47:5b:95:a2:87:b0:f2:43:d3:93:
ad:b9:63:69:c5:57:1c:28:dd:6d:45:2d:4f:55:5c:33:ca:45:
c7:02:ae:22:90:ea:8b:79:0f:d6:ba:ed:b3:ea:14:09:b9:84:
07:43:4b:da:bb:3f:1b:79:bb:66:45:3a:ac:8c:bb:af:e7:16:
f5:24:1e:61:9e:62:60:18:5c:09:96:f5:1d:b7:9f:cc:98:e2:
07:8c:a7:e8:fd:8c:02:12:ee:5e:b3:b3:c3:b3:1a:be:01:7b:
04:b3:30:2f:2e:6e:ae:8d:9a:5d:42:d2:70:83:46:c0:76:f2:
8f:20:84:47:f7:8f:2b:b3:1b:dc:35:13:a8:c7:57:0e:01:f1:
58:f6:3f:40:cb:8c:e1:0b:45:f9:f1:ad:bb:80:71:8e:e4:6c:
1c:87:e6:e5:93:3b:f6:f8:4e:7f:d3:4a:26:cc:4f:28:37:0c:
28:3c:9a:e7:06:0e:f6:62:f5:57:23:f5:97:c6:2a:1f:ae:84:
63:37:1d:ec:31:bf:a1:0d:9d:68:e5:c3:5c:cd:21:1c:8b:e8:
e4:34:b1:58:4d:2e:7a:06:05:90:f0:2a:5e:a8:89:3b:17:f9:
83:43:f8:bc:2f:41:87:15:4a:46:7e:fc:0c:86:fb:db:e5:93:
b4:52:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:39 2025 by rpki-client