Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ba4446-b3a1-374d-a6bd-b3df8cf7af5e.roa
File: f2ba4446-b3a1-374d-a6bd-b3df8cf7af5e.roa (raw, json)
Hash identifier: OatiwCggAvIRXm+JFphYLrRew+lvEg2FkfjtNZWcIYc=
Subject key identifier: 0B:9F:7A:62:AF:FA:18:06:48:F5:60:B8:4F:61:C8:F2:23:4A:A7:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C44765A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ba4446-b3a1-374d-a6bd-b3df8cf7af5e.roa
Signing time: Wed 19 Dec 2018 02:24:32 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=0a976c26-a7df-4875-8691-113cc335075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:4a:92:5a:39:8d:2e:00:1e:cf:4a:91:be:
b4:0e:05:a9:0b:2a:12:2c:56:f8:0b:8b:ba:81:76:
81:f2:33:d1:ed:dd:12:57:43:1d:8e:4e:5b:f7:bc:
af:b7:e2:dc:9d:e1:93:a7:57:00:5f:8f:fa:3a:61:
7c:3b:7f:15:63:39:71:67:6a:ea:2e:41:73:23:1d:
72:be:30:2c:a5:4a:84:32:6c:bf:82:db:6f:4a:60:
3f:59:66:90:62:37:26:66:4f:3b:5d:7d:ff:36:c4:
6d:ab:e9:eb:b9:46:8b:33:7a:f7:d9:82:7f:5d:ce:
81:b0:58:dc:ba:d5:27:7d:e1:6a:f4:69:fb:af:aa:
89:ac:09:40:3a:75:81:65:36:41:08:1b:28:bd:b9:
c1:23:13:83:0e:87:91:a5:28:28:69:ca:9a:9f:c8:
d5:66:6d:b4:95:0c:80:8a:19:f0:0e:99:2d:78:7d:
61:cd:75:da:66:f8:d4:f6:73:e3:3a:df:77:bc:40:
dc:4e:47:33:b0:ef:53:7e:f5:1e:b7:6e:32:18:07:
c3:75:f9:e4:49:32:1e:a9:48:96:07:8f:4c:e0:f9:
f0:82:0a:95:f5:52:f1:58:6e:da:b4:5a:7a:ae:b9:
59:7c:3e:6b:c8:1c:71:c9:93:e1:21:f7:99:11:d7:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:7A:62:AF:FA:18:06:48:F5:60:B8:4F:61:C8:F2:23:4A:A7:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ba4446-b3a1-374d-a6bd-b3df8cf7af5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:ae:66:2c:7c:4a:a2:bb:61:a0:76:d8:e5:61:f0:e6:60:59:
66:96:a3:22:4d:f1:1c:9c:0f:5d:38:ea:ee:0f:8b:7e:be:9d:
24:2a:51:bb:e6:af:7b:f4:50:c3:07:94:b1:aa:f2:f3:22:3e:
85:b3:63:f9:99:ac:00:51:38:29:ec:1f:aa:89:d5:57:ef:92:
20:b2:11:25:91:66:62:54:5e:3a:63:be:cb:fe:a8:a7:01:ad:
94:f2:c6:04:6a:29:28:9f:84:b1:36:4f:69:8c:71:d4:04:3c:
b9:bb:a1:01:9a:b4:cf:97:5f:cf:19:0d:0c:3d:5b:34:1d:2f:
b6:33:d0:a3:4f:c8:ae:75:0d:8a:34:38:17:5e:94:c2:6b:1c:
e4:c3:e9:74:73:4b:52:0e:2f:03:89:97:6a:d0:70:4e:a5:7a:
56:ab:e1:1f:fc:be:94:78:c7:f8:73:2f:71:f6:56:4f:ee:d9:
11:0a:d3:cd:56:f4:ac:28:cb:43:ff:44:91:95:19:e5:d4:25:
cb:c7:9a:72:88:40:43:e0:7a:02:4c:2b:90:fc:14:02:59:c2:
55:11:61:86:a7:e4:4d:f1:b5:a5:13:32:d4:13:dc:84:c4:46:
1b:f0:7b:3b:69:fd:a8:26:f4:dd:08:ae:f0:f2:1d:56:56:e9:
c8:8d:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:56 2025 by rpki-client