Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b9739f-6c7f-37da-9730-3c55e5dd2923.roa
File: f7b9739f-6c7f-37da-9730-3c55e5dd2923.roa (raw, json)
Hash identifier: +hde+ZM9GPN9O7OU2PUMSjlyXEtmR7KctKvaw5geOIM=
Subject key identifier: 7C:0F:9F:4E:28:25:A0:D2:45:06:94:6E:19:38:B9:7B:22:06:8E:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C492A861
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b9739f-6c7f-37da-9730-3c55e5dd2923.roa
Signing time: Wed 19 Dec 2018 03:46:44 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.219.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=4fba71ec-a374-4513-90e4-229f405c2a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:8d:f4:60:ba:da:cc:fe:37:30:55:7d:e4:
6a:3c:3e:62:55:52:b2:f2:65:3f:6b:ac:c4:d6:38:
62:eb:6e:20:c7:89:9d:62:25:18:2f:03:c9:fe:02:
71:75:18:92:6b:47:23:18:7f:be:08:59:e6:7a:36:
2c:22:9c:f1:a8:fc:ef:85:03:25:00:0e:45:19:28:
8d:e6:9f:26:fb:72:b9:8f:c6:b3:48:37:5b:f4:72:
37:36:85:cf:8d:3b:b0:e8:47:87:1a:61:64:5f:30:
84:c1:b4:8c:ca:9d:d3:c9:d6:f7:b7:9b:25:18:7d:
2a:0e:ed:ee:05:6b:d3:34:d9:ec:89:d1:c6:8f:5c:
01:7d:53:1c:8d:e0:7e:cf:b3:a9:60:11:9c:ff:77:
4a:44:2b:17:6a:f1:4b:33:eb:e3:34:7f:17:91:f8:
4e:ed:ca:62:1d:76:7f:27:fc:55:ac:16:e1:c8:47:
e3:0d:3d:f7:ce:71:98:fb:bf:d8:1f:be:f1:43:9c:
b2:8b:39:43:34:77:f5:ce:f8:1e:49:cb:33:fc:19:
72:3c:bd:98:11:aa:87:64:62:83:7f:15:73:2e:8d:
17:1f:9c:25:f8:54:4e:45:4e:21:0c:4c:c2:07:29:
38:b0:c7:66:65:78:cd:05:3f:2c:00:76:a1:3b:6e:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0F:9F:4E:28:25:A0:D2:45:06:94:6E:19:38:B9:7B:22:06:8E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b9739f-6c7f-37da-9730-3c55e5dd2923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.219.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0b:65:a2:83:0e:70:98:28:c7:2f:f0:71:12:9e:d3:32:31:
b7:a9:78:5c:b2:07:94:c8:71:68:68:56:bd:d2:3e:0d:cd:86:
e7:f0:a3:02:67:a1:19:4a:39:37:26:4e:84:20:62:56:ae:83:
35:90:80:4d:bd:e5:67:51:5f:18:f9:34:48:18:01:80:bb:05:
81:28:4b:a6:66:83:99:90:7e:d5:72:b7:c4:c9:fe:11:f0:3f:
ca:9a:14:4f:eb:b5:35:84:5a:c6:58:33:0d:1b:d5:7e:3c:3a:
43:9a:70:44:06:77:54:7e:22:92:d1:4d:c5:b1:2c:ce:5d:0d:
57:71:cc:e8:b8:01:c2:09:fe:e2:5b:48:99:81:30:ba:f5:ac:
e6:cb:0e:56:c4:77:00:6f:c6:82:c6:c8:85:1e:b7:a9:97:44:
4c:89:a8:ff:4d:b9:8a:4f:a6:c3:67:29:36:fe:44:42:ea:93:
03:2e:75:3b:a6:0a:13:74:f4:e2:64:0f:cb:cf:90:67:95:d6:
91:8d:4d:16:05:33:46:b3:e0:71:02:27:06:db:a6:68:fc:18:
e1:ad:88:77:60:a6:ad:2e:1b:6c:49:63:43:62:41:b3:3e:57:
2e:66:bb:1a:dd:97:10:31:07:f1:bd:4a:ab:16:0a:0a:83:df:
2a:f6:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:31 2025 by rpki-client