Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c8e105-5d31-34db-9261-97206347df8f.roa
File: f1c8e105-5d31-34db-9261-97206347df8f.roa (raw, json)
Hash identifier: MWyazel/xilTw9lApy623f6jbZKEBdNz4ObVYTSccNk=
Subject key identifier: 17:E2:5E:AC:F9:7D:B0:1D:D9:54:59:84:35:C3:0A:37:30:6C:41:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4478FD4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c8e105-5d31-34db-9261-97206347df8f.roa
Signing time: Wed 19 Dec 2018 02:24:43 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2c82949c-50dc-4ab8-ae55-3773ba4c8e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:20:06:43:2d:de:90:1b:94:24:bb:61:0d:
f0:7c:9d:3d:00:80:89:1c:5b:71:40:1e:fd:34:8e:
84:38:8b:01:53:27:f6:45:a7:4f:fe:9d:2c:a1:98:
1e:8e:f8:e1:9b:e4:57:0b:9d:ce:36:29:1a:12:a2:
e4:58:5f:fb:23:51:56:b5:32:92:84:e7:3b:ee:e5:
06:ee:19:48:6b:36:58:0d:9a:fd:1f:45:91:f2:e7:
a5:e0:e5:8e:39:49:13:e6:fa:54:27:eb:2b:05:d5:
56:b4:83:8f:d5:20:a2:59:8e:92:ed:25:a7:56:d3:
12:d2:e8:a1:e1:33:69:f7:63:84:43:df:e1:6e:de:
8b:3b:57:1b:42:64:b2:38:6f:6c:e3:ff:f8:21:32:
e7:2b:42:13:a2:d8:69:b0:8f:63:d7:28:68:ba:31:
b3:34:bf:4a:f6:a3:84:ba:98:87:e5:af:13:45:5f:
d1:ae:1d:fe:7f:c9:2d:41:b3:fe:95:48:20:f6:ac:
83:cd:33:e2:16:08:ec:17:16:dd:da:9d:fa:4a:6a:
57:1e:c6:d3:bb:f4:90:31:16:d5:88:a7:6b:35:ff:
56:c2:aa:41:1c:ec:30:22:6f:91:ee:bc:e5:78:29:
7e:45:8b:52:6c:fc:30:80:e0:88:c1:0f:27:75:ea:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:5E:AC:F9:7D:B0:1D:D9:54:59:84:35:C3:0A:37:30:6C:41:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c8e105-5d31-34db-9261-97206347df8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:de:6d:9d:b2:f6:3e:b5:57:37:11:82:04:60:26:09:1e:ec:
90:23:df:1d:33:04:56:65:b2:68:88:85:8c:ac:fd:41:de:7c:
b9:54:d4:3b:0e:d4:22:74:10:83:0e:39:83:b7:07:94:48:21:
64:de:0c:b3:13:67:26:ef:89:bf:2b:d3:97:cf:88:70:18:3a:
ff:6c:6c:90:13:40:f0:c6:8e:43:07:27:62:a2:f8:7c:73:c8:
b6:90:f4:dc:2c:35:0a:f6:c9:dc:c7:3e:98:cc:03:10:c0:08:
3e:ca:92:04:9d:11:8e:e0:f9:b7:e0:de:b7:f1:ea:0d:2d:fe:
8c:fc:d7:5a:86:70:bf:d4:85:ac:f2:45:50:b6:f9:7d:f6:98:
3b:d0:c5:3c:bb:57:b7:ae:cf:51:ff:18:30:69:3c:5f:32:46:
fb:44:41:ac:b9:ae:79:95:e4:94:81:cd:c0:87:9c:03:59:bd:
5e:0a:1f:bb:11:a3:a5:ed:76:09:b7:7f:3e:4b:d1:dc:0c:a3:
2c:7a:63:e2:cf:39:59:0e:db:01:6c:4e:49:8f:58:ea:ab:ba:
32:3e:b2:0d:d5:0b:03:d9:39:85:d3:c4:21:5a:76:01:72:2c:
18:5b:72:42:8a:68:6e:a7:18:bb:b8:b3:c3:be:32:29:c5:17:
a3:51:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:00 2025 by rpki-client