Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2de58-0f21-31c2-923b-841b858a2218.roa
File: 8ea2de58-0f21-31c2-923b-841b858a2218.roa (raw, json)
Hash identifier: 6rzfj8JAhKdLOQF0dJ5QKBA4lrXnw5eL6GXZkZUf6Xw=
Subject key identifier: AF:CB:9D:24:42:8D:5C:B5:62:E1:66:BB:F1:8A:D2:55:C3:13:9B:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D254980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2de58-0f21-31c2-923b-841b858a2218.roa
Signing time: Wed 10 Oct 2018 08:43:36 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.231.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=5ec1eb08-57b6-45fa-b886-cf68cdd5edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:da:6c:93:6c:72:0b:5b:c6:dc:08:be:46:
f6:a9:68:46:cd:83:54:8b:77:e3:99:1b:9e:e1:aa:
b6:fd:98:1b:cd:49:d4:92:50:d4:df:80:a0:b9:91:
5b:fc:8a:f7:a3:c1:92:ca:e8:4e:e2:bf:ec:1d:36:
87:9d:a9:f5:67:03:e6:e9:b9:dc:d8:1c:56:25:fb:
9f:01:d9:18:f7:ef:fd:5f:e8:84:4d:ad:2e:b6:8b:
15:c0:5f:9f:bf:46:04:c4:d6:08:14:c0:81:9c:ca:
e2:3a:da:5f:a1:df:35:a4:47:a2:3d:69:d1:2e:94:
e6:c6:de:34:f8:2a:35:12:23:22:6e:b6:b9:23:0c:
cb:03:4a:b7:2b:f6:95:e5:7e:c0:11:28:d3:cd:fd:
74:0e:1b:b1:3a:62:03:5e:b6:3d:67:79:0d:c4:a9:
f3:d6:69:38:b3:86:08:9e:75:2c:b4:7c:7f:e6:9a:
02:77:dc:18:86:30:31:ab:a7:d1:da:44:d7:b2:c1:
3e:71:cd:ed:bc:34:2b:12:0c:23:81:b7:32:f1:f6:
a0:58:57:43:9e:a9:56:8f:f1:5e:8f:3c:ee:12:d1:
f8:27:e6:57:dc:ed:a7:86:98:89:9b:98:12:d0:95:
61:96:bd:b3:b9:a6:44:46:3c:f7:d9:c1:ad:19:96:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:9D:24:42:8D:5C:B5:62:E1:66:BB:F1:8A:D2:55:C3:13:9B:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2de58-0f21-31c2-923b-841b858a2218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c6:a9:ab:f9:8e:02:b8:2b:ed:6b:83:bf:45:74:2b:f4:fa:
c5:f0:d2:e9:9b:4b:c3:7b:d3:19:64:b3:69:3a:43:60:85:8d:
5e:c3:75:ac:f0:ed:56:e6:e3:65:f1:b9:40:d6:59:22:f8:83:
9b:e4:b1:a0:94:48:d0:0c:ec:1d:d6:cc:d7:c8:40:03:df:74:
1a:8a:26:be:ac:a5:d7:72:44:80:39:36:31:6d:51:10:ac:42:
1d:ab:da:8c:a8:d6:96:ec:23:df:5e:d7:5e:ab:3f:2d:94:03:
8a:de:7d:40:f5:a8:0c:9d:86:af:d4:01:aa:80:60:ba:8c:da:
c4:3e:2e:07:f0:84:50:ca:e4:12:54:22:5b:ca:e9:e5:94:c8:
fc:58:da:23:b6:ab:bb:2d:3e:c6:2c:5b:58:f6:75:24:64:18:
aa:5b:2d:40:80:fe:82:94:22:44:5d:c6:d9:c5:1f:2e:98:e9:
96:e8:60:d4:b3:7e:68:38:9e:dc:fc:8d:c9:bc:3e:80:50:24:
c9:28:36:a9:a3:15:5b:dc:b4:84:ba:f4:f2:1b:12:b1:0c:bb:
9f:68:79:d9:36:eb:86:ab:31:1a:a1:b3:5f:c0:60:bb:62:8f:
d7:57:1c:a4:89:a2:8d:27:ea:df:d1:73:a1:35:53:a4:a6:6a:
6c:cc:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:25 2025 by rpki-client