Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e7c5445-1084-32a2-b73a-a4c7abd265bb.roa
File: 1e7c5445-1084-32a2-b73a-a4c7abd265bb.roa (raw, json)
Hash identifier: UGvBqArfBzu7f2MHMEwLBI/lSSCMFEyF0/rXxv+sLF8=
Subject key identifier: 8A:63:6D:FA:87:52:20:4E:3D:EF:55:BE:80:84:19:36:54:C4:2C:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C50B51BA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e7c5445-1084-32a2-b73a-a4c7abd265bb.roa
Signing time: Wed 19 Dec 2018 05:58:32 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.231.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=fc8574d0-a99e-48fd-8fb5-b2225d58e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:d0:fd:66:23:fb:a2:8b:49:1d:0d:0a:94:
9e:a5:dd:51:3e:17:42:4f:5a:b2:88:d9:73:00:1d:
e8:92:59:46:88:d1:06:ee:10:b9:c1:44:46:2d:37:
8d:e2:73:14:62:b3:51:48:2a:1e:9a:4a:39:97:15:
bf:ff:22:6a:42:b0:64:ae:3a:a7:c3:c1:70:7d:a2:
54:96:23:7c:3a:6d:c8:38:5b:94:33:49:e3:50:4e:
2f:0a:9a:41:75:62:82:0d:1e:d7:e4:52:da:42:66:
6b:1b:8a:ba:74:77:af:9a:5c:3d:a2:ea:d4:17:6c:
c2:6e:d4:92:04:0d:33:9a:c9:f4:e7:ec:fc:bb:09:
ce:ca:f2:18:21:bc:02:ec:4c:58:4f:35:00:9c:f0:
90:94:c4:35:15:ec:b2:39:10:22:9f:5d:9d:a4:cc:
5e:7f:2f:68:6c:b8:6e:71:7a:83:b9:e5:fd:ba:7f:
06:49:f7:9a:39:2e:8f:81:a2:57:6f:d9:69:c2:0b:
a1:9d:a7:7c:a4:83:aa:1b:5a:7f:49:00:90:3d:ea:
b0:e9:49:85:d7:70:17:3c:93:d1:0e:18:b4:de:74:
10:50:cb:38:2c:68:7d:4d:43:e6:19:b2:b2:d4:1c:
0b:b9:3b:d6:9e:27:77:f0:1e:09:f2:ae:a7:51:1c:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:6D:FA:87:52:20:4E:3D:EF:55:BE:80:84:19:36:54:C4:2C:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e7c5445-1084-32a2-b73a-a4c7abd265bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:71:25:95:3b:56:7c:1a:cb:15:2e:58:fd:20:1e:07:3e:dd:
21:4d:b3:c6:47:32:4c:5f:db:3f:db:3b:04:ef:c2:51:67:ba:
b7:bd:4d:ea:bc:82:e4:f1:7c:e9:7e:70:de:71:2d:d7:84:04:
3d:bd:ae:cd:33:d6:cc:8b:54:a9:46:e3:22:4b:f7:d7:a6:05:
f4:4c:70:d4:fb:86:bc:c3:20:6b:4e:b4:1b:6d:3d:b3:db:4a:
e9:9f:1c:92:db:41:87:0e:ea:11:26:3e:de:04:af:4a:62:47:
75:c3:b7:c9:a3:5a:3c:de:cd:3e:6f:06:f4:b2:87:f5:fb:2c:
76:32:43:f6:cf:a1:57:43:72:6d:b9:01:23:3f:e7:76:9f:eb:
b0:ed:c6:3e:2e:c5:2f:cb:eb:f4:4b:88:86:c7:af:f2:5c:da:
79:f3:20:9c:7e:55:47:80:07:b8:b5:cd:d9:ea:b6:8d:20:84:
e0:cc:7e:42:08:2b:ed:cf:e2:3c:52:02:ed:c3:15:c7:3b:6e:
99:b0:a1:b2:53:f0:c6:5f:ee:fb:b0:35:12:0c:a6:e0:b6:36:
0a:96:2c:21:3a:f0:70:9e:f0:f1:cc:21:f0:10:7c:7b:aa:1b:
8c:83:ce:08:d5:ed:4e:2d:08:ea:bd:a1:12:21:b2:f0:15:9f:
c1:66:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:05:52 2025 by rpki-client