Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e18e0d5-e914-3daa-9679-e5240cfb99b5.roa
File: 8e18e0d5-e914-3daa-9679-e5240cfb99b5.roa (raw, json)
Hash identifier: mKsaT9VUtmAHgjhifFvl+RWOJdI+kNwNn+3+Gv4zosU=
Subject key identifier: 3F:FA:58:26:48:8F:60:35:DE:DE:DE:C6:38:C2:9C:87:F6:7C:29:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D25B0A3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e18e0d5-e914-3daa-9679-e5240cfb99b5.roa
Signing time: Wed 10 Oct 2018 08:44:03 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.251.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=77468ff6-8f4a-4f0c-8047-ac41ed0ccd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:df:94:ae:7a:44:b8:76:45:2c:55:bf:c9:
16:e4:84:5d:46:81:92:13:c0:13:4a:94:12:ef:79:
6e:25:93:e9:4f:d2:f5:83:45:73:2e:1d:71:42:a2:
3f:ee:0e:65:d1:33:6a:02:95:02:83:63:26:45:ca:
fd:91:6b:26:dd:29:55:d8:29:10:3b:79:b6:ae:ee:
b7:f9:97:a6:6a:b3:57:1f:82:15:f0:77:8c:24:42:
75:19:7e:4b:3c:95:2f:c9:34:91:79:fb:61:ce:48:
ac:60:97:a2:99:bc:a4:0a:e4:8f:04:31:8e:3f:d8:
0e:86:eb:f3:36:55:d3:83:6b:4c:f7:6c:1d:b5:76:
24:cc:07:60:c2:d5:95:cd:2c:7c:0c:e7:09:8d:43:
fd:ba:eb:e2:86:b3:18:b1:7d:de:4f:22:a4:6f:52:
79:4f:98:f3:60:e4:aa:31:1e:cc:ff:03:58:61:f5:
3e:fa:e5:e7:f8:96:d4:3e:50:99:99:51:c4:39:2f:
06:25:a6:9d:ce:06:4b:6b:02:2a:ce:d7:28:a2:a4:
56:ab:9b:63:d7:85:81:e9:58:b0:56:2e:d5:1a:3c:
69:55:78:0d:97:ef:d1:97:33:1d:da:2d:67:a6:49:
49:c4:41:97:58:e3:a5:3c:87:15:3e:a4:f6:9a:c7:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:58:26:48:8F:60:35:DE:DE:DE:C6:38:C2:9C:87:F6:7C:29:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e18e0d5-e914-3daa-9679-e5240cfb99b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.251.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b1:79:30:4d:86:e0:a4:53:3f:74:91:f0:86:c2:58:a3:e5:
b3:be:fa:6e:14:3e:0c:18:66:10:7e:49:d2:42:f2:56:2f:1d:
95:eb:79:b4:7c:21:4d:15:1b:97:39:c8:04:ce:8b:47:74:19:
4d:04:1c:b9:60:36:18:ae:d4:f9:40:a1:39:e8:7f:84:cf:8a:
fb:f2:cb:0c:e8:a5:60:e5:84:c3:9a:7c:9d:07:7f:9b:7c:1d:
1d:69:72:14:43:04:f8:9c:bc:27:de:60:9b:5f:a7:24:b9:ca:
14:4e:32:05:86:30:04:ad:6e:2b:5c:09:5f:cd:21:a3:6e:94:
d3:5d:41:e3:08:fd:90:2d:b7:cc:69:80:2a:d5:88:ed:b0:8f:
da:ad:13:8f:1c:da:1c:e0:a3:f3:60:8a:c0:5e:9b:db:6e:7d:
27:c2:79:f5:17:a5:ec:45:e9:3d:08:fb:8e:03:9f:8f:27:99:
9e:da:fc:97:b9:1c:d2:ab:7d:90:7a:ff:f9:88:39:31:f3:c2:
49:a3:4d:bc:e7:0a:1b:6c:32:c1:78:8c:f2:ee:b0:91:bf:22:
12:b5:61:00:df:fa:7f:a0:e3:d8:76:3d:dc:7d:7f:d7:5b:91:
7f:39:ed:14:9d:8a:ec:f9:db:53:3d:7d:47:42:24:70:1e:45:
2b:46:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:12 2025 by rpki-client