Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa
File: 0df593f6-5b90-399a-ac5a-1638233b8e9b.roa (raw, json)
Hash identifier: DwNkm2pnEJN0Be1rksMsUActSFoCTiDh5mVR8+k38IE=
Subject key identifier: 1B:27:D5:D8:9A:7F:90:DC:A7:95:8E:D6:C3:3C:87:D7:5B:3B:37:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD40345
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa
Signing time: Wed 10 Oct 2018 07:14:50 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.76.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=da74d9b6-6281-4102-8ae3-76fc239d549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:e1:12:7c:55:c4:f7:66:58:b9:2f:2d:38:
f4:c6:aa:36:38:22:c5:19:1c:56:e3:c8:9a:e5:3c:
ea:40:a1:de:81:ea:3b:46:8f:96:01:29:dd:26:3f:
d7:36:db:9b:de:86:b1:9a:26:35:d2:76:9f:fe:35:
0e:0d:8b:90:e4:c8:3f:cf:56:62:86:61:c9:4a:43:
fd:d0:92:74:71:c7:3a:5a:b7:31:68:62:99:72:90:
0a:3f:90:af:df:cd:05:19:33:0e:2e:a1:f0:32:02:
a5:95:02:9c:37:e5:54:61:75:96:90:65:6c:ad:15:
0b:6c:fd:bf:70:2e:d3:00:9e:dd:eb:ce:ff:85:61:
27:4d:ab:e8:37:91:86:8b:5a:e4:f5:42:09:9b:03:
d0:53:cc:05:c1:7f:8d:cd:4d:d5:b9:f6:57:33:bc:
73:9c:05:9f:8c:61:d9:5e:b9:c1:c8:28:94:e6:89:
03:94:13:97:5b:38:e2:93:d8:2b:c2:36:d7:3a:8f:
01:67:95:9f:a5:84:2a:c4:fc:3a:ee:03:e1:c7:1c:
44:37:6c:88:ea:86:4b:9c:f8:43:e4:6d:a5:67:32:
60:9a:10:b5:08:7d:e7:4f:92:df:33:80:18:08:7f:
7d:ac:7f:15:74:60:f3:f5:43:a0:e6:80:6d:6f:86:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:27:D5:D8:9A:7F:90:DC:A7:95:8E:D6:C3:3C:87:D7:5B:3B:37:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.76.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f5:db:31:72:d2:e3:e8:c8:92:12:b8:a0:51:11:8d:d0:64:
2c:79:88:f7:0f:37:31:e0:0c:78:c0:b5:a5:3e:d0:54:f2:03:
9c:fc:64:3f:5a:aa:57:fb:b0:69:4b:5f:35:e9:5c:8d:71:89:
90:d4:a6:b3:ba:69:67:47:26:1b:c4:8e:2a:04:ca:c8:1e:d9:
d3:1e:0d:b1:ce:32:a5:a0:c1:21:50:1a:15:1d:a0:ae:67:cb:
f6:dc:d0:40:df:36:3c:79:00:dd:65:37:69:f6:31:d5:05:f3:
e3:57:1c:00:53:16:49:f6:a2:9a:37:f1:bb:66:b1:d6:27:11:
75:55:61:f6:b7:0c:f3:f7:17:d4:82:33:0e:2c:87:37:33:25:
69:bb:b1:b0:ea:64:7b:17:6b:34:e2:e1:ac:1d:4d:20:5e:d5:
82:9b:57:6b:99:36:de:a4:c9:86:a9:00:84:8e:63:fd:25:51:
a5:c0:53:fd:23:9a:81:d5:c5:0d:d9:60:6c:0f:eb:fe:1a:70:
af:0d:cd:74:af:cc:28:cb:9c:b2:28:9d:26:89:f4:88:60:a3:
d7:e0:59:6c:83:6a:8a:fb:ff:9e:02:7e:d1:70:e1:1b:82:6c:
bb:db:d7:81:09:d6:ab:49:dd:33:0e:0f:9c:41:b3:47:d8:3e:
84:f2:5c:fb
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlzUA0UwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGRh
NzRkOWI2LTYyODEtNDEwMi04YWUzLTc2ZmMyMzlkNTQ5ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJva4RJ8VcT3Zli5Ly049MaqNjgixRkcVuPImuU8
6kCh3oHqO0aPlgEp3SY/1zbbm96GsZomNdJ2n/41Dg2LkOTIP89WYoZhyUpD/dCS
dHHHOlq3MWhimXKQCj+Qr9/NBRkzDi6h8DICpZUCnDflVGF1lpBlbK0VC2z9v3Au
0wCe3evO/4VhJ02r6DeRhota5PVCCZsD0FPMBcF/jc1N1bn2VzO8c5wFn4xh2V65
wcgolOaJA5QTl1s44pPYK8I21zqPAWeVn6WEKsT8Ou4D4cccRDdsiOqGS5z4Q+Rt
pWcyYJoQtQh950+S3zOAGAh/fax/FXRg8/VDoOaAbW+G8SkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQbJ9XYmn+Q3KeVjtbDPIfXWzs3ZzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzBkZjU5M2Y2LTViOTAtMzk5
YS1hYzVhLTE2MzgyMzNiOGU5Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzRMADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAMfXbMXLS4+jIkhK4oFERjdBkLHmI9w83MeAMeMC1pT7QVPIDnPxkP1qqV/uw
aUtfNelcjXGJkNSms7ppZ0cmG8SOKgTKyB7Z0x4Nsc4ypaDBIVAaFR2grmfL9tzQ
QN82PHkA3WU3afYx1QXz41ccAFMWSfaimjfxu2ax1icRdVVh9rcM8/cX1IIzDiyH
NzMlabuxsOpkexdrNOLhrB1NIF7VgptXa5k23qTJhqkAhI5j/SVRpcBT/SOagdXF
DdlgbA/r/hpwrw3NdK/MKMucsiidJon0iGCj1+BZbINqivv/ngJ+0XDhG4Jsu9vX
gQnWq0ndMw4PnEGzR9g+hPJc+w==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:17 2025 by rpki-client