Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec711952-32c7-3241-8a5a-2b7ce4ac56ee.roa
File: ec711952-32c7-3241-8a5a-2b7ce4ac56ee.roa (raw, json)
Hash identifier: Yhbhpi7aPmZ55S/4anfzIgOzUsIG6lg6BJw/00My+Zc=
Subject key identifier: AB:F3:88:A9:B3:A5:F1:64:D7:4D:CD:5B:F7:11:92:AA:84:9A:D7:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD4AEA2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec711952-32c7-3241-8a5a-2b7ce4ac56ee.roa
Signing time: Wed 10 Oct 2018 07:15:34 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=919c52dc-85a7-4ccc-a8c5-96a87765be5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:0c:17:58:da:3f:2c:be:48:63:e3:d3:5c:
79:b2:1c:db:09:dc:79:e0:e9:b2:7c:8f:54:bf:b0:
a9:61:61:d9:15:d6:f9:f1:57:8d:fa:1b:9c:a3:ff:
64:49:2e:d1:90:f0:15:a8:c4:1c:d6:7f:af:3e:09:
4d:7f:eb:26:92:d1:73:c2:86:fa:64:4c:38:70:99:
e6:c6:cf:56:18:f4:bd:b4:0f:a1:73:66:dd:e9:18:
0a:7a:fc:5e:00:87:d7:12:82:95:a9:d0:22:62:fd:
91:97:42:15:7a:d3:c2:93:22:56:30:82:e6:77:16:
86:52:14:84:ea:69:07:fd:dc:ff:33:05:86:1c:28:
9f:93:3a:37:d8:46:06:0b:da:7a:c9:1d:fc:27:7f:
9a:8b:df:0d:f2:20:1d:cf:22:1d:19:d6:ff:24:e0:
ad:a0:03:d3:59:00:1c:c9:7e:6d:97:de:42:06:67:
64:09:e5:17:38:bf:60:e4:83:50:47:c3:92:f4:40:
12:7f:ed:6e:c9:1c:83:04:f5:71:c5:3f:93:de:8b:
7a:46:c6:1e:42:9d:5f:86:37:6a:c9:4c:e7:14:ef:
b6:a1:70:f1:d2:bc:3d:3c:7f:c4:aa:d6:6b:16:4f:
64:7b:c3:7b:9f:e0:04:64:fc:0b:09:c1:48:f8:29:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:88:A9:B3:A5:F1:64:D7:4D:CD:5B:F7:11:92:AA:84:9A:D7:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec711952-32c7-3241-8a5a-2b7ce4ac56ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:70:12:8a:9f:81:a4:e5:6e:e1:d4:72:16:cb:90:73:21:14:
40:93:05:09:44:d0:da:57:b0:2d:a7:9d:7e:6d:c4:93:fb:86:
72:cd:19:5c:cc:4e:a7:53:9f:a3:04:24:0d:dc:fd:fd:e3:fa:
6f:bd:f3:99:e8:60:23:59:93:42:01:8c:f1:d6:42:dc:9b:19:
67:fd:6d:8b:e7:71:f2:6b:e2:cd:34:8d:fc:b4:b3:93:f7:2a:
1a:ed:3d:9c:72:d2:33:ff:24:34:ae:6f:9b:31:cf:d6:c8:d5:
80:09:52:7b:9c:38:85:56:d9:91:ce:3f:83:c1:f3:90:88:a1:
28:db:9c:09:91:23:e1:6c:a7:5d:7d:28:c6:0d:df:12:78:c9:
26:4e:bf:2c:dc:d0:d3:40:56:71:b8:22:78:a9:59:20:bf:06:
2c:86:3b:f1:38:fc:12:15:41:76:9a:96:13:c5:38:e2:0e:64:
5b:00:69:60:09:4e:8e:05:16:bf:02:2d:7e:64:e5:91:c9:7c:
e0:1d:62:df:2f:f4:25:66:9d:8d:dd:1e:6c:bf:75:80:1f:4a:
0a:6b:7c:89:d9:e3:64:fb:09:22:78:64:5b:96:c2:45:77:80:
6e:a3:91:03:ec:93:06:ba:3f:96:c3:ba:24:63:50:86:bc:d0:
cf:ea:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:23 2025 by rpki-client