Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8e68a0-0cf4-3e6e-b49e-6e6e02fddde7.roa
File: 2a8e68a0-0cf4-3e6e-b49e-6e6e02fddde7.roa (raw, json)
Hash identifier: M8pDofM5Imi4Zho6fhmn72i+jnEsvskgcgOHS3dlm9w=
Subject key identifier: 40:76:5E:9E:75:3F:E9:51:E1:DB:87:D1:5E:93:D2:0C:BD:2E:BB:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B3050D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8e68a0-0cf4-3e6e-b49e-6e6e02fddde7.roa
Signing time: Sun 21 Oct 2018 08:17:09 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.95.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:05:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d76f345a-e2d6-48e0-94be-2df17e966a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:64:b5:15:29:e9:bf:81:6e:7a:fa:f5:cb:
aa:2c:6f:e1:20:ca:b3:6d:b5:6b:04:d3:60:6f:8f:
63:19:85:d9:7c:99:b3:ab:54:f8:17:2c:d3:09:fb:
6e:6c:25:0a:62:4a:5d:9f:c3:56:f2:9d:90:d2:09:
79:42:c4:64:d2:3a:c2:71:87:d8:f9:3a:09:73:da:
8d:f8:e9:7d:0d:78:b7:55:76:04:4b:1e:f8:90:4e:
b9:30:6d:df:22:b5:d9:95:6c:73:4e:9b:60:a5:2f:
d5:6c:e1:db:30:07:e9:26:d7:ff:85:33:f3:ba:e4:
8b:6e:99:75:54:42:9a:e0:ad:87:ce:c3:aa:ea:4c:
3f:aa:8c:5e:cf:45:8e:d4:26:bd:a1:89:ab:18:22:
f0:5f:d5:55:57:82:46:13:24:98:a5:6f:7d:e1:13:
5a:6d:34:75:28:23:d6:ef:da:49:b9:78:e8:46:a1:
25:27:dd:e5:79:8b:75:9d:35:16:bc:41:68:f0:27:
1e:ea:34:f4:25:e1:11:15:cd:ea:7a:75:1e:27:b0:
dc:f2:f8:67:69:5e:5b:7b:4e:0c:8c:08:39:b3:b9:
7f:eb:57:2d:93:2c:c8:bf:a9:00:00:c8:fa:84:a8:
5b:eb:8d:28:cf:78:2d:b6:31:be:19:d3:33:1d:de:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:5E:9E:75:3F:E9:51:E1:DB:87:D1:5E:93:D2:0C:BD:2E:BB:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8e68a0-0cf4-3e6e-b49e-6e6e02fddde7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:59:bb:2b:d8:ca:82:33:e3:1d:e2:03:67:17:05:bf:5a:e3:
e1:4a:4a:57:38:aa:1b:56:f0:72:7c:49:c4:3d:70:b5:a4:6b:
73:13:65:de:00:ed:61:cd:1e:ae:32:03:30:37:b2:f0:24:7c:
50:a4:10:03:28:2d:43:ce:c0:15:85:bf:a6:b0:72:0b:a4:88:
33:69:01:dc:36:c3:09:be:34:c8:76:0b:98:64:b0:cb:05:9c:
09:a5:4c:dc:6d:78:7e:e1:34:67:34:96:ee:8c:f4:75:8e:1c:
09:c1:f6:d2:ca:5e:3a:77:6d:2f:65:33:93:23:0c:fb:2e:b7:
aa:3c:fe:07:6e:3b:79:d7:61:1e:52:89:83:29:7d:fc:82:f7:
e3:c0:76:d3:5c:4f:8d:2b:47:27:f5:94:a2:19:88:92:0e:7b:
3d:2a:df:88:b8:1b:9b:7a:87:96:9d:e3:0b:bf:f6:8c:70:7a:
c4:d1:6a:7e:8b:84:a3:9f:e9:7c:c3:2c:99:76:49:4b:d4:fb:
0d:11:7e:04:26:3f:59:56:e5:64:68:b6:25:0d:87:8d:ad:a9:
40:7b:eb:8a:83:a9:bc:44:94:87:f8:0d:49:83:3f:e3:50:31:
12:77:65:15:5e:b2:cd:08:0f:80:e3:40:83:0e:dc:31:fa:f3:
da:ec:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:27:55 2025 by rpki-client