Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/625186f3-af28-3b42-bc34-31c5f703a189.roa
File: 625186f3-af28-3b42-bc34-31c5f703a189.roa (raw, json)
Hash identifier: feWaRx6uienElwFD7G7wYe5bVfERGnp5OLNwrc7oIVg=
Subject key identifier: 18:3C:FC:0A:A6:B1:B4:D8:9A:7C:C1:27:4B:AB:B6:84:0B:9F:78:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B4BF74
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/625186f3-af28-3b42-bc34-31c5f703a189.roa
Signing time: Sun 21 Oct 2018 08:19:02 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.231.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=563030d7-bda3-40ef-b6c6-b1ca8b0d3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:9a:67:13:7f:71:10:87:c8:f0:52:ed:4a:
03:c8:57:87:20:90:f0:cf:fe:bd:3d:f5:e6:75:c0:
ac:01:60:a8:02:7c:0e:f0:16:1f:f0:ac:1b:fc:b0:
3e:cb:e8:f7:7c:d1:d0:22:62:7b:6e:47:4d:4a:7f:
81:ca:fe:cc:eb:40:72:a5:7b:c0:ea:f7:35:d5:c3:
32:95:b8:12:b2:26:d7:42:5b:9d:bf:c4:3f:03:ca:
77:47:13:93:5c:c1:17:23:4f:98:9b:97:38:55:1c:
5c:72:f5:7f:9e:a9:99:6a:50:3e:22:24:f2:2b:96:
f9:57:bc:f3:21:4b:ec:73:ef:f6:42:d9:86:fc:c8:
d8:65:45:e7:50:cb:51:ee:f0:c6:5e:69:47:89:90:
5a:79:81:b0:e8:d0:88:f8:05:e1:2e:0f:b2:76:a7:
b8:9b:5d:9c:89:bd:6b:94:29:5f:29:ac:a1:6a:5f:
43:8a:5c:5e:36:e8:9e:fe:4e:50:11:5d:b5:ce:b1:
50:ad:ee:60:df:33:71:82:d0:d1:49:ce:42:a4:bc:
c1:06:04:5f:90:7e:74:c8:70:5a:c8:c9:62:53:cb:
f9:86:33:3c:8f:be:de:e0:2e:29:eb:62:51:27:dc:
9e:e2:b5:bf:0c:e2:00:28:af:6b:77:97:60:01:3a:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:FC:0A:A6:B1:B4:D8:9A:7C:C1:27:4B:AB:B6:84:0B:9F:78:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/625186f3-af28-3b42-bc34-31c5f703a189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:76:c5:30:fb:d2:a3:8d:41:c7:02:71:ba:ad:24:40:8f:bb:
8a:b0:ee:6d:43:ee:d9:62:28:15:4a:b5:c1:a9:f4:7a:7e:00:
9c:c5:0d:f6:b3:0a:91:e9:22:bc:ed:81:98:8b:cd:36:53:91:
14:60:34:42:78:27:fb:24:6f:d2:3a:6c:bf:ef:dd:f5:0f:ad:
28:3b:a5:2e:64:0f:0b:68:e8:87:b9:15:a5:de:2d:6a:d8:f0:
e2:48:26:5c:4f:af:64:89:a2:cc:24:7e:ff:57:8e:1d:e9:97:
a2:c2:bd:bd:6f:15:11:d2:18:12:04:ee:54:ac:9c:32:a6:40:
b8:89:34:77:04:df:ed:ec:9e:75:bb:20:19:0d:69:48:47:51:
61:4b:a2:b8:a7:1f:42:e8:be:16:d5:08:2d:06:ca:32:b6:d5:
b1:46:1a:48:37:81:53:37:87:1d:98:3e:f5:61:2d:ac:bf:b1:
b2:39:f0:8f:be:a3:ff:5c:3f:d7:25:e5:af:b9:64:25:c5:6a:
4c:9e:3a:1d:06:10:b8:71:c0:a5:d9:0f:96:32:f3:77:67:73:
1c:41:e6:96:8a:fd:a9:3f:bc:45:90:a6:56:fc:37:00:90:3a:
f6:3a:e4:e3:e7:0c:d6:70:5c:20:9e:34:be:28:ba:ff:16:8a:
f9:47:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:38 2025 by rpki-client