Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/501a9c2c-b76e-3142-8402-81fda30c6c0b.roa
File: 501a9c2c-b76e-3142-8402-81fda30c6c0b.roa (raw, json)
Hash identifier: qFpgtQVUjCqeziQLguwVd/Rywbyy0QmDU0hpbY1hX/8=
Subject key identifier: 45:E2:AD:D4:2B:7E:78:32:FF:DA:DE:D5:AC:92:79:07:9F:39:17:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B542FB
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/501a9c2c-b76e-3142-8402-81fda30c6c0b.roa
Signing time: Sun 21 Oct 2018 08:19:36 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.239.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=9e602acc-b5a9-4def-b0d1-a43efa44ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:80:48:38:ca:f3:d0:6d:d6:a3:0c:65:50:
7a:fc:e7:c9:e5:b9:09:2d:d7:18:38:c5:e8:4c:1a:
6c:4f:1d:92:60:ff:e1:66:67:6b:87:54:fb:a2:53:
ce:84:65:c7:1d:2b:df:97:4c:a4:aa:61:12:b7:ba:
7e:c3:53:a7:fc:a0:1b:df:c2:fe:3e:de:4e:f2:2f:
9f:7c:4f:a1:35:a0:69:f0:99:96:93:99:89:66:e3:
26:99:ce:16:6f:3c:8d:83:79:8b:ae:48:35:50:c6:
d8:8d:8f:7f:26:b1:83:a8:f0:89:c0:22:aa:45:58:
27:19:d1:93:f8:dd:4d:02:5f:fe:ad:68:67:3b:07:
97:7c:71:a5:03:42:ac:32:63:ec:99:4c:db:29:78:
53:83:57:fd:f7:92:1b:52:29:97:b0:43:3e:a9:2c:
fe:44:52:b2:1c:6b:8e:a7:8c:ce:0b:d7:c9:c7:c3:
6c:b7:b2:3f:2b:66:3c:55:71:43:83:21:26:31:3c:
4a:aa:aa:2b:e7:f1:47:b5:d6:86:3c:d0:d4:e3:91:
a3:b0:63:36:e3:c2:de:c3:39:d3:5f:ba:15:2c:6c:
fb:38:0b:45:36:97:82:86:f2:39:04:41:2f:0c:f3:
40:bb:30:74:b5:9d:06:d5:8d:f3:77:b0:4a:c7:77:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:AD:D4:2B:7E:78:32:FF:DA:DE:D5:AC:92:79:07:9F:39:17:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/501a9c2c-b76e-3142-8402-81fda30c6c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.239.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:55:3c:0c:40:ff:12:3d:59:1d:87:4e:98:b3:b5:fd:44:39:
16:52:c5:c5:de:5e:7e:1e:43:fc:ea:be:07:eb:8a:da:45:ea:
e6:29:ec:31:f4:b7:05:c3:5f:12:23:fc:4d:f3:47:26:2b:50:
80:89:fc:28:ad:72:49:8e:3d:45:07:d7:1b:26:c2:16:fe:f4:
18:72:31:c5:67:a6:07:87:ca:a2:96:22:a0:f8:38:41:f9:1a:
b2:92:8f:1e:4d:9d:63:8b:4c:fb:29:24:2f:e8:ae:b1:b0:ef:
e4:54:d4:76:96:72:05:ab:bd:f8:54:2d:e2:5f:94:a2:72:f3:
ca:60:c7:ce:f9:a3:f8:b5:41:4e:e7:de:ac:9b:4e:5f:58:70:
9d:c5:ad:d0:e3:a8:db:68:d3:fe:0d:2b:f3:fe:40:04:c5:e0:
ba:9b:c3:91:60:29:06:bc:c9:8b:b7:75:1c:a8:09:27:2e:6d:
07:1d:e0:55:a4:94:2f:0b:95:2e:f4:75:82:a7:a4:f8:7c:ec:
1a:69:66:c5:4f:a1:30:42:06:cd:fa:a5:9d:f8:be:cf:c0:6d:
b0:d9:d0:9f:36:40:51:1d:a3:25:9f:ab:6b:71:16:cf:3a:8b:
64:99:e6:f4:79:fd:5f:62:e1:13:e1:30:b7:de:b2:6a:9c:2a:
6a:d0:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:44 2025 by rpki-client