Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb716aa7-88a7-349f-9237-98ec439e4cb9.roa
File: eb716aa7-88a7-349f-9237-98ec439e4cb9.roa (raw, json)
Hash identifier: xgFasVY+zQnrOnI+fQQTHvRTKY4aPOArS8S2BLjUkLQ=
Subject key identifier: 8F:DB:3F:31:82:F9:F7:58:6A:DC:28:26:DC:86:97:03:D1:8A:03:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4697A45
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb716aa7-88a7-349f-9237-98ec439e4cb9.roa
Signing time: Wed 19 Dec 2018 03:01:46 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=b6108ebe-5515-4234-b70a-b10e31edf6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:f9:bd:a6:f7:f6:27:1b:59:c6:16:05:74:
09:56:4a:d9:56:a5:37:72:05:97:f2:b0:7a:c8:a4:
6c:3f:2d:df:a4:0c:e5:e6:95:1d:81:f8:19:4a:3b:
ce:3f:16:1d:a1:9a:03:34:96:20:ff:2f:4b:57:40:
e7:95:32:fc:59:48:d2:78:05:07:95:ce:0d:f5:dd:
a6:18:2d:01:bb:d1:26:b3:c2:7c:ba:d6:bf:18:07:
c5:e1:90:4e:14:e3:fe:67:9b:2b:75:16:9a:af:5d:
4a:e4:37:54:c1:0b:91:57:b9:fc:eb:11:cd:1a:c9:
3a:84:90:15:90:5b:9b:dd:a4:41:49:bb:2b:40:e6:
5f:ca:4b:3b:1b:f5:78:23:ab:58:db:f6:a5:53:38:
d9:af:19:3a:b8:2c:7e:97:27:6d:3e:40:b1:48:75:
83:ee:4f:ea:64:cf:f9:af:37:18:e6:8f:b0:01:34:
8c:95:de:71:c7:d3:00:1b:3e:61:43:d2:49:16:96:
c0:db:f2:3b:3a:d4:53:f9:0e:36:e3:0e:74:44:1a:
2a:31:e3:55:4f:14:4d:10:29:62:42:15:85:d8:f6:
3f:9d:7f:a8:ec:8b:3a:f7:57:86:75:ae:64:cb:d8:
c7:ea:96:ac:05:09:39:8f:30:da:af:ce:45:9f:e7:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:3F:31:82:F9:F7:58:6A:DC:28:26:DC:86:97:03:D1:8A:03:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb716aa7-88a7-349f-9237-98ec439e4cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7d:ac:c1:eb:2b:b9:ea:59:77:e6:95:02:a6:32:08:4d:9b:
b6:b7:24:ac:88:a3:be:30:16:1f:26:81:72:f1:85:92:b1:2d:
b2:fa:cb:91:6f:a6:de:29:cd:9e:01:b8:aa:2d:b1:75:92:24:
eb:1b:3b:89:8c:ac:04:46:26:b4:3b:e4:7c:f1:30:e2:d2:4c:
d8:75:41:d5:59:78:ff:b9:f3:1f:71:2b:90:b4:a5:ca:7d:e4:
74:7f:e5:b9:bd:45:b3:d4:f1:5e:47:d9:45:a0:5b:eb:e9:31:
f5:30:5e:9c:46:62:dd:c8:be:a4:ce:3d:a7:59:52:67:d4:52:
e1:ee:c0:44:08:80:da:8b:b7:03:75:c7:cb:a6:b8:6d:3e:e5:
c1:4c:93:53:de:cb:e0:5a:d9:05:43:fa:f8:9c:43:59:0b:20:
87:81:fa:41:ba:b4:d9:4b:9d:66:76:c0:d0:ed:dc:be:ec:8b:
a1:e0:b0:31:4d:66:8f:83:67:af:a5:4f:40:77:56:4d:01:db:
42:27:d5:2e:f4:c7:19:ec:53:2d:00:c1:92:1b:56:9a:62:f0:
80:91:bc:ec:7e:24:98:23:19:b7:f4:91:6b:c8:e3:a4:b8:33:
03:c2:ab:41:e1:8a:a2:58:27:bd:6f:49:e0:31:37:4a:60:fa:
73:d7:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:43 2025 by rpki-client