Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/601a8bad-e8ae-37b9-a3a4-9ffe3840837b.roa
File: 601a8bad-e8ae-37b9-a3a4-9ffe3840837b.roa (raw, json)
Hash identifier: yFUyovsoNbArVxVsG9ETPe/3gVRv1K+vjhBThYJwTk4=
Subject key identifier: BA:EB:C8:2E:F3:88:B1:BE:46:B8:C3:01:75:A8:35:67:6A:CB:1A:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD456CF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/601a8bad-e8ae-37b9-a3a4-9ffe3840837b.roa
Signing time: Wed 10 Oct 2018 07:15:11 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.95.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=1c8a8e19-f087-49c8-85d6-2394a920333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:d2:09:f2:1b:28:7f:69:a6:24:7c:3b:b8:
b7:4a:7e:f6:30:76:60:d9:2e:23:7b:6f:fa:de:26:
4b:25:54:a4:18:af:2a:7f:56:08:48:ee:ff:81:b4:
75:bb:83:bf:a7:32:de:8e:65:cc:52:95:33:d1:36:
68:0f:4f:c8:01:71:91:7e:ab:f1:30:a3:a3:e0:7b:
79:53:25:0e:ce:06:c4:b4:16:90:9d:e0:ea:5d:d0:
f4:09:e5:68:90:06:1c:a9:db:68:17:52:d0:39:60:
27:9d:03:96:06:88:ce:02:d7:b4:5f:3d:a0:08:7a:
3c:dc:a8:69:be:5d:23:34:42:20:9a:10:de:b0:2f:
20:91:e8:1b:67:93:86:ba:fb:27:a9:e8:2f:e8:e0:
d8:db:bc:f1:10:b6:d8:de:34:c9:f1:c9:42:b4:c1:
3d:04:1a:63:1a:e0:31:93:4a:bb:3a:5b:a4:1f:1c:
1d:fb:e4:96:30:2d:8b:c7:0a:1c:4c:12:c1:ca:8e:
be:34:44:1f:05:82:1c:69:52:c0:39:ab:65:f1:d5:
73:01:12:d0:a9:f9:22:70:38:fd:30:cb:5d:05:d8:
2b:1e:4b:fe:b4:59:6a:a5:1b:67:dc:f9:ff:47:01:
4d:97:14:ea:06:ac:f7:4e:c9:67:be:56:77:cb:a4:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:C8:2E:F3:88:B1:BE:46:B8:C3:01:75:A8:35:67:6A:CB:1A:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/601a8bad-e8ae-37b9-a3a4-9ffe3840837b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f9:76:94:63:4e:d7:3e:09:41:da:2d:a6:e0:7e:11:a8:d4:
cd:a3:71:94:e1:2c:91:07:5d:8d:65:17:9d:77:19:ea:7c:02:
97:ea:01:48:37:1f:d0:90:2d:5d:f1:cd:f2:1b:ad:fe:1a:bc:
79:cc:51:f4:80:7e:f5:b9:02:db:79:3e:ac:cc:8c:58:9e:9f:
21:68:a8:c2:b5:0f:f3:64:28:0c:d6:6d:17:6a:ec:95:c6:29:
37:ec:06:6e:27:17:dc:6e:ef:30:35:50:2f:fa:51:bc:05:02:
94:e9:cb:41:99:01:37:cc:2e:3a:6a:ca:80:49:50:31:aa:cd:
9c:78:88:87:08:a2:82:b8:e1:11:c1:17:6f:10:9c:6b:14:26:
e1:3a:77:a4:9b:9f:b2:12:d4:da:91:a5:f3:e8:bf:d0:38:cc:
80:01:0e:69:f9:94:6e:a1:1f:1f:b7:2c:f3:ae:e7:52:49:bc:
92:92:6e:58:d5:ec:55:6a:68:27:f6:44:af:9f:57:ab:51:61:
a3:79:e4:ab:72:5b:d8:70:d4:29:01:7c:9c:9c:de:46:23:fd:
02:d4:8f:0c:1b:31:53:5d:6b:11:07:48:94:f7:05:2f:be:a8:
dd:ad:fa:98:88:b7:43:42:d7:bb:d9:86:18:18:e8:2d:d3:24:
45:dc:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:37 2025 by rpki-client