Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9cc4b15a-bd70-31e2-82a3-efb0400dbb6b.roa
File: 9cc4b15a-bd70-31e2-82a3-efb0400dbb6b.roa (raw, json)
Hash identifier: dpjibKNR2wx9uQ0c+1QvphAIWrkoiw0neeO0dL/JxU8=
Subject key identifier: A5:89:32:AA:ED:C2:B7:CB:22:52:C1:9B:AD:5D:FE:61:FF:F2:71:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B57AF8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9cc4b15a-bd70-31e2-82a3-efb0400dbb6b.roa
Signing time: Sun 21 Oct 2018 08:19:50 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.248.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:7a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=43ce17c9-28c7-4c00-bf48-2e36889ff2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:77:e0:47:ce:89:8a:48:0c:48:0d:6b:9f:
3e:a3:9a:e1:db:3a:38:2d:6b:d7:01:b8:e4:7d:1e:
15:53:57:b1:37:48:bc:d1:e2:c4:8a:45:fd:51:a4:
b2:6b:fc:79:90:d4:6a:36:1f:c0:68:bd:fb:6e:e2:
12:50:9b:12:3d:e0:a8:47:6a:8d:d3:a2:33:67:fe:
78:19:32:a3:a6:8e:3f:38:2e:21:7d:2d:bc:dd:6c:
73:d9:4f:6e:32:67:13:01:bb:09:34:fe:e6:ea:8f:
e5:24:35:5e:b4:6a:90:92:24:ab:17:cd:b3:27:43:
67:a0:82:28:aa:12:01:e4:b4:a6:bf:fa:45:3f:e6:
16:c1:f0:db:08:10:6e:6c:8b:5c:ae:cf:0e:3a:51:
c9:49:79:38:15:52:60:11:ee:30:4f:8e:77:76:52:
f3:52:5d:e5:88:d9:2d:82:bb:cc:73:ff:d9:fc:ac:
8e:95:c7:45:88:88:44:73:e4:96:c1:48:86:5b:e1:
e4:49:8f:c5:55:ff:4b:ed:d9:0d:57:8a:9b:9c:00:
49:1c:f2:66:7a:4a:4f:d2:6b:6c:e4:39:51:85:9a:
97:e8:fb:2d:f1:20:20:22:dc:79:5f:1e:01:3b:17:
51:77:e0:7c:eb:a1:7a:f0:ec:b8:8a:a9:e2:f4:39:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:32:AA:ED:C2:B7:CB:22:52:C1:9B:AD:5D:FE:61:FF:F2:71:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9cc4b15a-bd70-31e2-82a3-efb0400dbb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.248.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:60:df:e1:32:87:e7:a8:d5:f6:ef:a6:42:4a:d5:43:36:8e:
59:7d:56:39:49:dc:2c:23:3c:92:d6:7f:3e:ae:bc:b6:c6:88:
c9:dd:c9:d6:f4:43:07:22:b9:e0:5c:1c:da:61:1a:9e:d8:a8:
60:b8:f0:6b:8c:02:8b:3e:60:07:a0:4a:65:51:6e:96:d6:ad:
a5:d1:bd:42:53:d2:ed:50:5d:e8:f5:ad:a2:4d:bc:39:7b:b6:
72:91:6a:f4:a5:e3:07:ee:16:cd:e6:84:9e:76:4c:d4:e9:b0:
66:d1:a7:45:43:7b:84:38:4d:9b:2e:b8:85:de:b0:85:f8:f3:
8a:bb:ef:e6:91:55:51:c4:8c:33:8e:7f:fa:a5:e1:47:30:53:
1e:48:51:12:c7:54:3e:64:40:7e:03:e7:9b:9f:82:b0:d8:e0:
f2:bf:9b:e5:f9:17:79:95:75:be:e1:0a:d8:3e:87:e8:16:50:
36:7a:4e:c3:fc:31:73:fa:24:e6:99:82:40:ba:72:db:45:72:
e8:91:24:5e:7d:8a:b2:50:47:c1:88:4a:e5:eb:dc:95:8b:25:
d7:22:9c:f7:9f:bf:ac:04:1a:70:66:cb:ca:60:a7:20:66:22:
d7:47:f8:b1:eb:93:1a:66:eb:9a:61:47:5e:f1:24:76:dc:3d:
91:2a:38:8c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW1evgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDQz
Y2UxN2M5LTI4YzctNGMwMC1iZjQ4LTJlMzY4ODlmZjJlODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANf2d+BHzomKSAxIDWufPqOa4ds6OC1r1wG45H0e
FVNXsTdIvNHixIpF/VGksmv8eZDUajYfwGi9+27iElCbEj3gqEdqjdOiM2f+eBky
o6aOPzguIX0tvN1sc9lPbjJnEwG7CTT+5uqP5SQ1XrRqkJIkqxfNsydDZ6CCKKoS
AeS0pr/6RT/mFsHw2wgQbmyLXK7PDjpRyUl5OBVSYBHuME+Od3ZS81Jd5YjZLYK7
zHP/2fysjpXHRYiIRHPklsFIhlvh5EmPxVX/S+3ZDVeKm5wASRzyZnpKT9JrbOQ5
UYWal+j7LfEgICLceV8eATsXUXfgfOuhevDsuIqp4vQ5O3sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSliTKq7cK3yyJSwZutXf5h//Jx/DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzljYzRiMTVhLWJkNzAtMzFl
Mi04MmEzLWVmYjA0MDBkYmI2Yi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzb4gDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAKGDf4TKH56jV9u+mQkrVQzaOWX1WOUncLCM8ktZ/Pq68tsaIyd3J1vRDByK5
4Fwc2mEantioYLjwa4wCiz5gB6BKZVFultatpdG9QlPS7VBd6PWtok28OXu2cpFq
9KXjB+4WzeaEnnZM1OmwZtGnRUN7hDhNmy64hd6whfjzirvv5pFVUcSMM45/+qXh
RzBTHkhREsdUPmRAfgPnm5+CsNjg8r+b5fkXeZV1vuEK2D6H6BZQNnpOw/wxc/ok
5pmCQLpy20Vy6JEkXn2KslBHwYhK5evclYsl1yKc95+/rAQacGbLymCnIGYi10f4
seuTGmbrmmFHXvEkdtw9kSo4jA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:53 2025 by rpki-client