Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0b56cd4-bb3f-3a16-86a0-a1e6c3497cb7.roa
File: f0b56cd4-bb3f-3a16-86a0-a1e6c3497cb7.roa (raw, json)
Hash identifier: FQDzo/TucpCvyrEyozg63uqWHilQXXQ3L8fyZQl64O8=
Subject key identifier: D1:D6:C7:74:1F:81:10:27:34:63:70:02:83:11:BE:63:E7:0D:D3:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C469EAFE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0b56cd4-bb3f-3a16-86a0-a1e6c3497cb7.roa
Signing time: Wed 19 Dec 2018 03:02:15 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:ea:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=7dba0840-53d6-4805-b4ea-6940f144c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:a9:78:58:d8:b4:1e:09:d6:79:d2:28:57:
37:d5:c0:9d:db:d9:2e:1e:09:30:d8:c6:a7:da:a1:
c4:4a:10:44:6d:27:a9:ac:83:8a:01:3b:86:ff:34:
1d:3b:2b:16:30:78:3d:a3:fb:80:fc:4d:0d:6b:30:
68:4d:01:47:73:fb:39:f5:76:b5:84:b0:a5:ca:b3:
54:4d:e1:27:30:eb:c5:99:c0:1b:6c:89:6e:9f:6c:
12:5e:79:2e:3d:10:d5:54:2a:ae:76:8b:8b:ea:95:
e0:2c:39:90:d2:b6:bd:ec:2e:40:d5:aa:40:ef:d4:
fe:39:74:4f:fa:3a:64:87:cc:67:7f:bd:a8:d8:d6:
c5:74:85:a8:95:d4:0a:8e:90:7f:43:07:b8:c6:62:
58:e4:98:cf:84:69:c4:98:9b:d6:c4:82:e4:56:90:
29:62:fd:24:22:b5:05:1d:4c:83:c6:22:a7:d2:46:
79:72:b6:b5:9c:2a:48:f9:c4:3a:a0:f1:b8:29:99:
97:53:2f:40:da:aa:8c:db:48:02:b1:ab:99:0d:bc:
3a:66:ad:6a:97:27:cc:27:4a:7d:c6:a9:c3:03:f3:
be:83:1d:eb:a5:36:f1:ec:24:10:15:ef:70:a8:86:
8d:15:1d:17:04:b9:38:5c:06:cb:2c:7c:be:03:9e:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:C7:74:1F:81:10:27:34:63:70:02:83:11:BE:63:E7:0D:D3:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0b56cd4-bb3f-3a16-86a0-a1e6c3497cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2d:69:ae:98:98:4c:13:17:bb:96:8f:d4:00:d0:63:71:97:
16:57:46:2c:e0:13:23:7e:a2:7b:f0:42:c8:d1:37:26:34:47:
bf:0e:5b:3a:35:6e:22:78:37:54:99:8c:ee:b9:61:bf:25:af:
3d:72:39:d8:e9:34:a0:db:cc:9f:e7:4e:a7:4e:91:16:95:c7:
0c:74:c1:58:47:ec:c4:29:c7:35:cb:8e:bd:48:ff:f0:2f:d8:
68:17:0c:d0:64:81:f3:f0:c4:18:25:ce:d0:e5:33:77:d7:46:
c3:11:34:32:68:11:9e:7b:08:b8:ac:8e:17:5b:df:6e:54:82:
27:c4:55:eb:da:cb:d8:5e:49:60:4c:52:7f:aa:fb:70:c8:22:
25:e0:d4:6b:63:fc:8c:3f:cc:d9:07:ca:99:6b:4f:43:dc:cc:
0a:93:bd:37:7b:48:25:43:a2:ff:ef:b2:28:90:36:6d:56:cc:
b0:9b:8b:69:fc:05:e4:b5:6d:4f:7e:44:fd:8e:32:b1:9c:00:
c7:cd:f1:f1:a2:db:43:55:24:ce:36:15:9d:4c:09:7d:f6:0f:
98:dd:0b:81:9b:07:b1:10:56:b4:31:f9:68:21:2f:21:fc:c1:
ea:26:85:70:a9:f9:8a:6a:7d:ce:86:14:10:ca:a5:fb:ce:b2:
76:c4:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:05 2025 by rpki-client