Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c024796-28de-3d77-baf5-8b1b0814f51a.roa
File: 2c024796-28de-3d77-baf5-8b1b0814f51a.roa (raw, json)
Hash identifier: j4qZI+Y9uame+Zma7hpGWbQxsEJjgKEwt2GZDDQnDZ8=
Subject key identifier: 1B:D2:D1:3B:1D:1C:7E:65:C8:E2:7C:18:A9:80:3E:74:B2:C2:0A:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16693C74939
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c024796-28de-3d77-baf5-8b1b0814f51a.roa
Signing time: Sat 20 Oct 2018 23:20:03 +0000
ROA not before: Sat 20 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=c94677f1-3cee-49bd-b412-60af62910557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:8e:d6:bb:31:83:14:61:ad:eb:0d:43:1e:
de:83:87:74:ec:89:ed:b6:77:95:9c:c9:e8:ca:45:
fe:39:ed:e8:10:89:9a:d1:88:e0:57:60:fc:7d:7b:
3a:96:b4:b2:53:12:f8:d0:ea:05:8f:6e:a4:73:7b:
c3:66:26:42:ce:22:71:a7:68:ee:2d:9b:8b:05:69:
39:21:ab:cb:48:78:02:0d:30:eb:10:3c:4b:8f:f2:
49:ef:d7:af:15:74:12:78:00:e6:cb:34:60:b2:f8:
ea:d4:e3:e2:50:76:91:b7:23:f7:7b:4d:c4:11:6d:
54:56:ed:8e:13:8f:1d:e0:75:2b:c7:56:0a:5c:0e:
5e:30:2f:a0:8b:93:34:1e:0e:09:e0:7b:18:49:33:
11:fd:bb:db:46:d5:d7:06:ea:51:cb:89:46:56:6a:
40:0f:d1:2b:9d:31:64:83:4a:e4:e6:f0:32:2e:d0:
90:4a:f0:90:4b:87:a7:e4:04:45:d1:14:70:8c:0c:
b6:2c:77:9b:d6:ca:d7:67:1b:91:2e:ae:c9:84:8a:
0d:52:7b:1d:73:b1:4a:c9:03:b8:0b:15:47:c9:cd:
44:03:ba:a3:e7:55:47:ea:95:1f:fc:af:c9:5e:ae:
ac:b2:6e:f3:8b:8c:6c:1e:32:09:5b:60:f0:83:99:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:D1:3B:1D:1C:7E:65:C8:E2:7C:18:A9:80:3E:74:B2:C2:0A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c024796-28de-3d77-baf5-8b1b0814f51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:22:59:62:85:c0:48:d2:86:41:f3:01:d0:1e:6d:ab:e3:59:
1b:e6:1b:e5:60:9c:16:32:5d:0b:75:e0:87:12:56:71:95:7b:
18:1e:ef:13:ab:e7:0d:f7:11:9f:54:ce:29:6c:07:3c:2a:30:
65:77:94:fb:22:5a:2b:1e:b3:ac:c5:99:a2:e4:79:2a:a0:29:
a8:58:5d:f4:99:29:34:b9:24:05:a0:f9:53:25:41:95:5e:b1:
0d:ad:27:ef:9f:fb:d0:d9:e9:d4:57:70:f9:73:2d:37:7c:76:
e7:ce:89:2c:92:df:32:68:78:fc:20:0f:f3:1f:43:bc:56:1c:
b0:fc:e3:05:43:37:01:b8:c3:99:a8:12:a6:2e:16:be:72:7c:
61:b9:de:10:f0:00:b1:09:29:1e:6e:67:f9:dc:66:8b:0f:21:
ba:e3:a2:dd:fe:af:71:36:13:37:0d:01:df:e1:e7:62:11:a6:
6d:3b:df:9a:0d:91:98:90:d0:b2:35:b4:99:7e:82:22:30:03:
59:d3:a5:48:1a:ba:56:43:c5:4c:10:f9:59:9e:05:58:15:7e:
76:01:b9:ab:ad:21:d8:70:e7:fc:73:ec:54:32:1e:af:10:59:
f2:45:48:58:1d:3c:ce:de:f8:95:1e:32:1c:13:d1:22:32:f5:
13:05:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:19:42 2025 by rpki-client