Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2509c1f9-230b-3873-b12a-dd5deda301cc.roa
File: 2509c1f9-230b-3873-b12a-dd5deda301cc.roa (raw, json)
Hash identifier: RCBgXAgNUAq6t+ZdYZuTB+z6LPITXOyhQQW7KJSqzyQ=
Subject key identifier: 44:8F:1B:27:A4:AF:45:E9:99:A6:2A:D2:18:6F:4F:46:4C:3E:E2:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B51493
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2509c1f9-230b-3873-b12a-dd5deda301cc.roa
Signing time: Sun 21 Oct 2018 08:19:24 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.238.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=b0c99f06-b443-4bf1-81f4-1eb1f5b58138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:fc:df:00:4b:4f:e5:f3:b9:ad:a0:83:bf:
56:69:f0:25:b5:ba:b2:3a:5e:bd:e2:ca:43:6b:4e:
fb:ef:d9:09:14:2e:09:d5:cc:87:e2:2a:9f:20:42:
f4:72:39:ba:9a:3f:d1:f1:df:17:e2:24:41:52:b5:
2d:c9:f9:b9:c3:8e:b8:1e:f8:f9:49:50:6c:ed:c9:
af:b8:a6:ad:ab:d2:b2:79:ed:b3:e1:6d:50:a6:70:
41:1c:27:88:b7:e0:64:d8:61:e0:49:86:2e:16:72:
14:d3:7d:6d:da:6f:ed:eb:b9:ec:70:58:86:5a:e4:
d2:87:56:66:40:f3:d2:09:88:bf:af:1c:26:99:09:
7b:33:84:e0:11:ba:da:d1:2e:50:de:7c:a5:16:08:
de:55:72:ab:b1:cb:a7:ec:c9:a6:69:25:5b:32:be:
f3:04:c2:52:a9:53:9e:19:f9:b0:6f:ca:4a:9d:04:
bb:a8:5e:71:a2:c5:66:90:94:f8:86:81:4e:4c:60:
8c:60:26:35:3f:8b:9b:91:ed:b6:11:75:06:94:b3:
30:55:8a:9a:ae:f1:e6:c2:06:0a:89:4d:eb:0d:30:
b1:e0:94:9a:2b:c7:8e:ee:bd:44:6f:3c:fd:67:b9:
63:ec:59:18:73:c5:a6:33:4a:86:f3:cf:f0:9a:86:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:1B:27:A4:AF:45:E9:99:A6:2A:D2:18:6F:4F:46:4C:3E:E2:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2509c1f9-230b-3873-b12a-dd5deda301cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.238.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ea:e5:e8:ee:97:fb:08:ad:92:10:ed:19:eb:05:9b:24:83:
95:07:4e:34:50:05:86:aa:a9:4a:49:0d:20:f3:36:52:a9:42:
4a:35:9d:7d:98:6d:90:7d:54:eb:4c:6f:8a:cb:ec:2d:ab:fc:
b8:dd:bb:09:50:f8:63:be:e7:20:d8:15:2a:36:d5:f3:1a:9a:
56:f8:41:9a:0e:8c:b2:60:8a:eb:01:5e:cd:58:94:93:7e:7c:
4b:e1:a4:4f:74:77:4b:e7:1e:ab:98:22:6b:ba:3c:37:94:80:
bc:45:ef:fa:b5:10:85:0a:48:fd:12:81:3f:05:45:30:f6:8a:
c2:41:fe:3d:ce:aa:2e:c3:ed:72:60:1f:b4:58:97:80:80:f9:
91:54:65:2d:d4:c8:dd:48:e1:27:1c:54:5c:57:87:0f:a5:ce:
9e:0d:26:95:b6:50:9d:ee:21:d9:8e:99:f7:33:d1:f2:8e:82:
6c:17:8a:57:f9:5d:1f:1d:4c:6b:ee:3f:01:14:22:5c:69:f6:
37:a4:10:de:99:8d:b5:33:2a:c9:44:6a:0a:a4:a3:49:bc:d3:
67:a9:b5:8f:56:b4:10:00:4d:a6:ce:51:63:4c:13:11:56:2e:
d9:f3:3e:ac:74:f3:6e:44:d4:b2:1b:e0:c3:e6:e8:7b:5d:b0:
6f:2d:28:32
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW1FJMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGIw
Yzk5ZjA2LWI0NDMtNGJmMS04MWY0LTFlYjFmNWI1ODEzODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALTp/N8AS0/l87mtoIO/VmnwJbW6sjpeveLKQ2tO
++/ZCRQuCdXMh+IqnyBC9HI5upo/0fHfF+IkQVK1Lcn5ucOOuB74+UlQbO3Jr7im
ravSsnnts+FtUKZwQRwniLfgZNhh4EmGLhZyFNN9bdpv7eu57HBYhlrk0odWZkDz
0gmIv68cJpkJezOE4BG62tEuUN58pRYI3lVyq7HLp+zJpmklWzK+8wTCUqlTnhn5
sG/KSp0Eu6hecaLFZpCU+IaBTkxgjGAmNT+Lm5HtthF1BpSzMFWKmq7x5sIGColN
6w0wseCUmivHju69RG88/We5Y+xZGHPFpjNKhvPP8JqGB3UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBREjxsnpK9F6ZmmKtIYb09GTD7iuDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzI1MDljMWY5LTIzMGItMzg3
My1iMTJhLWRkNWRlZGEzMDFjYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzbugDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAE+rl6O6X+witkhDtGesFmySDlQdONFAFhqqpSkkNIPM2UqlCSjWdfZhtkH1U
60xvisvsLav8uN27CVD4Y77nINgVKjbV8xqaVvhBmg6MsmCK6wFezViUk358S+Gk
T3R3S+ceq5gia7o8N5SAvEXv+rUQhQpI/RKBPwVFMPaKwkH+Pc6qLsPtcmAftFiX
gID5kVRlLdTI3UjhJxxUXFeHD6XOng0mlbZQne4h2Y6Z9zPR8o6CbBeKV/ldHx1M
a+4/ARQiXGn2N6QQ3pmNtTMqyURqCqSjSbzTZ6m1j1a0EABNps5RY0wTEVYu2fM+
rHTzbkTUshvgw+boe12wby0oMg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:35:14 2025 by rpki-client