Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa
File: d1cb9622-45b3-3545-ab7f-ba9000485179.roa (raw, json)
Hash identifier: GZlJlP7wJZNtQArxUj/pIg35uq0RSiSd/HVR9t0mxMQ=
Subject key identifier: A8:FD:FF:85:0C:45:5D:F9:4B:7E:36:BD:98:B8:2D:04:0D:82:C4:B9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16834375ED1
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa
Signing time: Wed 09 Jan 2019 20:04:30 +0000
ROA not before: Wed 09 Jan 2019 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 7224
IP address blocks: 52.46.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:34:37:5e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 9 05:00:00 2019 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d6ad2c64-a32d-4a8f-b14d-367b7a80ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:bb:21:d5:57:0d:21:e9:98:ad:24:b7:c1:
13:df:09:68:0e:5c:e2:d3:e4:d3:7f:4b:b0:1c:98:
b4:bb:06:bb:9a:d3:dc:74:8f:09:fc:93:f4:b2:3d:
81:fe:1c:90:92:79:01:d9:ce:8a:56:34:b8:52:60:
6e:09:d9:c6:3e:e9:2e:9b:2a:92:86:f2:30:2b:91:
59:ab:db:7a:a1:be:25:3a:88:bb:f9:f8:e7:c2:19:
b8:90:10:72:61:f6:3e:4c:e4:d2:c9:01:30:7e:9f:
bb:c6:1e:79:54:e5:a2:d5:70:77:1e:64:1d:36:d2:
39:56:8a:91:92:18:59:17:f5:ac:49:53:d8:ea:28:
c4:fe:76:7b:a1:0a:c4:39:bf:11:86:44:00:89:6d:
66:5c:91:f7:3c:3b:28:67:df:e5:3e:a6:2d:8a:21:
3c:7c:cb:9d:bf:72:aa:37:ca:71:b5:f2:be:d7:b8:
3d:a3:a8:8f:52:18:4d:5f:e2:53:77:c9:46:16:1c:
50:a2:74:50:54:32:53:e2:6f:a1:29:54:9b:0c:1c:
9f:6f:bb:16:eb:58:fe:4d:3e:68:48:46:7b:92:0e:
31:13:c2:c9:5c:a4:00:4a:8e:a2:ff:3b:ed:c9:34:
1f:d7:0f:a5:49:2a:72:e5:75:13:3a:ed:61:a7:ad:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:FF:85:0C:45:5D:F9:4B:7E:36:BD:98:B8:2D:04:0D:82:C4:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.46.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:07:42:d2:23:b2:aa:71:a7:a0:5b:da:42:25:56:e2:e1:b2:
b3:b0:9c:e6:00:c8:ca:48:0d:f8:b0:9a:ef:d2:25:f3:f6:81:
da:05:f1:c3:1f:a5:af:eb:24:5b:96:e4:a9:03:0b:8f:e1:88:
4d:96:6c:1a:a6:63:f4:27:f3:70:f8:9a:56:65:6c:b4:6a:63:
a6:74:df:d1:5c:5a:61:39:46:2b:95:cc:bb:6d:36:64:7e:53:
77:0a:fb:29:a0:88:b9:cc:21:6a:69:01:50:1b:a3:08:8a:c2:
bd:2f:f0:d4:83:e6:45:cb:f7:ef:51:34:71:83:98:10:a3:08:
5c:c3:13:de:b9:d9:25:ba:b5:d6:01:f4:ee:8c:e5:9a:6c:8b:
74:76:51:16:f4:b8:c6:d7:25:83:0d:7b:1a:09:a6:5f:ed:5a:
b5:50:97:22:5b:5e:e8:bf:b5:0c:94:4a:9b:a4:49:80:b2:8b:
b9:00:9a:d8:c0:a1:da:5b:78:99:2f:2e:44:15:38:98:2a:ed:
b4:85:74:d9:fb:8f:59:ce:11:d1:3a:0b:14:29:4a:1e:b0:a5:
e0:25:a7:79:f5:b3:cc:7a:41:81:4d:9f:3c:f9:d4:3c:61:35:
15:ee:6a:e6:b9:22:e3:85:a4:0f:f3:81:bf:7b:d8:24:99:95:
d7:4c:60:fd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BaDQ3XtEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xOTAxMDkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGQ2
YWQyYzY0LWEzMmQtNGE4Zi1iMTRkLTM2N2I3YTgwZWM3ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALDbuyHVVw0h6ZitJLfBE98JaA5c4tPk039LsByY
tLsGu5rT3HSPCfyT9LI9gf4ckJJ5AdnOilY0uFJgbgnZxj7pLpsqkobyMCuRWavb
eqG+JTqIu/n458IZuJAQcmH2Pkzk0skBMH6fu8YeeVTlotVwdx5kHTbSOVaKkZIY
WRf1rElT2OooxP52e6EKxDm/EYZEAIltZlyR9zw7KGff5T6mLYohPHzLnb9yqjfK
cbXyvte4PaOoj1IYTV/iU3fJRhYcUKJ0UFQyU+JvoSlUmwwcn2+7FutY/k0+aEhG
e5IOMRPCyVykAEqOov877ck0H9cPpUkqcuV1EzrtYaetqJkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSo/f+FDEVd+Ut+Nr2YuC0EDYLEuTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2QxY2I5NjIyLTQ1YjMtMzU0
NS1hYjdmLWJhOTAwMDQ4NTE3OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjQuvDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAvAdC0iOyqnGnoFvaQiVW4uGys7Cc5gDIykgN+LCa79Il8/aB2gXxwx+lr+sk
W5bkqQMLj+GITZZsGqZj9CfzcPiaVmVstGpjpnTf0VxaYTlGK5XMu202ZH5Tdwr7
KaCIucwhamkBUBujCIrCvS/w1IPmRcv371E0cYOYEKMIXMMT3rnZJbq11gH07ozl
mmyLdHZRFvS4xtclgw17GgmmX+1atVCXIlte6L+1DJRKm6RJgLKLuQCa2MCh2lt4
mS8uRBU4mCrttIV02fuPWc4R0ToLFClKHrCl4CWnefWzzHpBgU2fPPnUPGE1Fe5q
5rki44WkD/OBv3vYJJmV10xg/Q==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:18 2025 by rpki-client