Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3cb39ca-86a2-38bf-9a3b-676d996ef973.roa
File: f3cb39ca-86a2-38bf-9a3b-676d996ef973.roa (raw, json)
Hash identifier: 7F2vJmDkVU5Hawo1QVAmfH77lITNs8PjfAUpx71QL/Q=
Subject key identifier: FD:5E:D9:82:A5:F1:59:BA:B7:DB:B6:CE:E7:D9:6E:6C:B9:A3:97:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C46A4FA7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3cb39ca-86a2-38bf-9a3b-676d996ef973.roa
Signing time: Wed 19 Dec 2018 03:02:40 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.218.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:6a:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=8ed26b21-3893-4a32-981d-68d517999abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:a5:80:4d:28:e6:63:36:19:80:7e:11:3e:
ab:76:e2:b2:98:c2:90:aa:f2:fc:ff:66:34:fc:f4:
6c:1c:4f:42:27:96:4e:27:33:a1:36:b7:7f:b0:37:
86:6b:3e:f7:0a:c2:68:cc:f8:14:06:19:f9:96:46:
37:f8:3c:04:b6:04:17:a7:ca:68:c5:59:c9:db:28:
e5:c5:24:0c:f2:6b:38:6f:b2:17:30:f3:8e:57:02:
61:26:a4:26:ce:88:88:74:1d:89:cc:aa:76:58:08:
f0:20:c6:e3:a1:84:06:83:03:dd:d1:01:81:71:b0:
c4:5b:d6:60:7f:12:3b:66:29:72:96:86:78:db:16:
24:99:50:d6:61:a2:8f:38:f4:3b:cb:a5:09:11:f4:
a1:0d:c0:26:11:bd:f3:1d:2f:17:7e:f7:69:73:05:
8d:33:cf:c4:c3:7c:0e:17:e7:b6:71:d8:0b:c9:ec:
aa:dc:1c:ae:2f:8c:d6:1a:10:00:0c:61:47:4d:95:
27:46:3b:5e:6a:e1:49:06:a8:a4:57:10:2c:26:f6:
b3:1c:fd:e5:a6:51:6f:ec:ce:d1:aa:34:cd:2f:64:
6c:51:50:79:8a:09:c4:09:cf:38:10:e0:d8:80:22:
b8:5a:ce:3c:f5:4a:b3:17:d7:d0:ca:53:1f:20:89:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:D9:82:A5:F1:59:BA:B7:DB:B6:CE:E7:D9:6E:6C:B9:A3:97:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3cb39ca-86a2-38bf-9a3b-676d996ef973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.218.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:61:a7:11:68:54:d3:bf:71:f8:86:fc:59:33:af:ca:5f:34:
42:17:bd:14:78:ff:74:a5:99:a7:0d:e3:b5:98:e7:6e:b9:1c:
6e:57:90:e6:c0:b7:11:82:fb:8d:d8:03:1f:78:4f:2a:45:7a:
90:39:7f:8a:b0:45:53:75:e8:ec:9f:33:19:8e:3e:c2:52:d6:
18:58:be:ec:a5:f1:f5:9a:6b:7b:13:12:b1:f2:1a:3e:32:29:
d1:58:29:cf:35:ca:32:69:ad:86:b3:01:c1:1f:0e:26:e5:5a:
87:f0:3d:b8:1c:5c:41:7a:6d:29:3d:c7:7a:57:be:13:af:8a:
4a:a6:5a:e3:73:ea:99:a3:71:80:f7:5c:b0:42:30:8e:47:a2:
e5:84:4e:04:1c:1d:f1:ff:af:0d:84:70:8b:6f:0c:dd:3d:55:
a8:cc:29:98:88:ff:eb:07:5c:92:d5:12:d8:fe:35:94:b5:12:
24:ad:4e:b5:b3:66:54:17:3b:3e:68:fc:47:c0:a6:0e:09:8a:
8e:e9:79:f6:11:89:7f:5f:7a:d4:d8:c6:d4:77:b9:38:2c:1d:
d3:c4:af:96:ae:32:93:78:a5:b9:4e:21:60:95:4d:e9:7b:22:
0a:b7:3a:0a:d4:09:96:eb:2e:55:b9:17:a5:0d:73:23:af:77:
a5:46:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:56 2025 by rpki-client