Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad821ff5-521e-3f3e-96f5-da9080f10531.roa
File: ad821ff5-521e-3f3e-96f5-da9080f10531.roa (raw, json)
Hash identifier: 75hEBx4CyCun674sNcMzrzEAME4CTFdxoGdYwEHgqWY=
Subject key identifier: B2:89:AE:F4:C3:9A:69:D0:23:0E:46:87:B3:4E:B2:81:08:38:E6:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D2598C7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad821ff5-521e-3f3e-96f5-da9080f10531.roa
Signing time: Wed 10 Oct 2018 08:43:57 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.251.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=a99c3968-29d1-4515-9a14-e6ee9327d1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:c7:b4:52:f4:96:01:03:a8:4a:83:f2:62:
61:b6:99:22:06:8e:f7:ec:9e:39:8d:08:c8:bb:c0:
d2:b0:4e:10:45:07:a5:d8:f7:1b:4b:45:96:a2:d7:
5d:f7:88:11:99:17:54:7a:41:a7:76:9f:34:9d:84:
06:77:0d:63:74:3d:c7:0c:df:bd:37:81:86:76:7b:
7a:d0:ef:22:57:aa:77:d5:0f:a1:12:83:a7:5c:26:
58:9a:c5:3d:79:f5:ae:d4:9a:85:f5:d5:54:97:c1:
71:8b:db:05:68:15:b4:a9:48:ab:ab:bc:7d:05:49:
91:37:e4:d0:56:62:98:60:39:95:2f:40:2e:23:ee:
18:66:b8:09:2b:43:87:50:95:b7:3d:96:66:5f:48:
2b:0d:3b:3b:99:ac:b8:70:38:19:10:44:cf:1a:99:
d8:5d:3f:d7:a9:a1:25:f4:e9:b1:c1:2c:bb:68:3a:
7b:f4:75:fc:31:8c:43:19:56:f5:8b:ab:50:e6:bd:
62:3d:d0:7f:7d:12:4c:37:6e:03:40:e6:a9:dc:c0:
78:85:c5:8c:3e:69:82:a5:e5:c8:02:49:7c:4f:f7:
97:99:48:76:ef:5c:10:2e:9b:ad:57:02:c8:60:36:
07:71:4c:dd:f6:e6:1f:a8:d7:6c:e7:e1:c1:df:9d:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:AE:F4:C3:9A:69:D0:23:0E:46:87:B3:4E:B2:81:08:38:E6:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad821ff5-521e-3f3e-96f5-da9080f10531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.251.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d1:d3:ff:69:1e:1d:5c:46:2d:37:c6:59:48:a3:76:68:6b:
1e:12:3b:69:cb:bd:9b:fe:60:0a:84:eb:26:59:fd:76:26:bb:
2c:a6:37:91:c6:77:9c:4c:47:63:49:d1:0c:58:0e:bc:73:5d:
d7:e7:b4:24:73:fc:28:9a:ad:57:47:72:c6:7b:c4:5e:27:59:
bb:56:1b:03:21:a9:7f:c6:00:dd:ca:b0:14:57:71:ad:0f:34:
16:c7:1f:25:96:6e:20:44:bc:cb:f9:10:91:ae:f2:b7:9f:a2:
80:49:78:3a:0e:14:d2:61:af:5a:b3:6e:1b:37:b9:47:21:f2:
02:de:5e:ac:a0:5b:5c:d3:7f:20:9f:bf:91:54:70:cd:a6:4d:
a7:50:3c:3b:f6:ce:69:91:4a:0d:93:a9:e3:e4:fd:f4:52:4f:
bb:a3:2b:48:7a:a5:d2:2d:5f:d5:f7:73:cf:83:42:6b:c7:08:
6a:f0:68:75:00:ae:96:46:37:73:31:a7:86:61:e2:db:32:da:
14:cc:3a:2c:bf:9a:eb:a4:21:bb:b4:66:f6:c3:78:19:18:a8:
10:1d:d4:a2:14:84:d7:5f:55:48:b1:30:d8:28:d5:2c:1b:f7:
f5:ed:e1:13:1c:d1:38:ef:54:0d:df:0e:61:21:3c:21:fe:35:
72:dc:be:35
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZl0lmMcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGE5
OWMzOTY4LTI5ZDEtNDUxNS05YTE0LWU2ZWU5MzI3ZDFkYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKoNx7RS9JYBA6hKg/JiYbaZIgaO9+yeOY0IyLvA
0rBOEEUHpdj3G0tFlqLXXfeIEZkXVHpBp3afNJ2EBncNY3Q9xwzfvTeBhnZ7etDv
Ileqd9UPoRKDp1wmWJrFPXn1rtSahfXVVJfBcYvbBWgVtKlIq6u8fQVJkTfk0FZi
mGA5lS9ALiPuGGa4CStDh1CVtz2WZl9IKw07O5msuHA4GRBEzxqZ2F0/16mhJfTp
scEsu2g6e/R1/DGMQxlW9YurUOa9Yj3Qf30STDduA0DmqdzAeIXFjD5pgqXlyAJJ
fE/3l5lIdu9cEC6brVcCyGA2B3FM3fbmH6jXbOfhwd+d7QUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSyia70w5pp0CMORoezTrKBCDjm+TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2FkODIxZmY1LTUyMWUtM2Yz
ZS05NmY1LWRhOTA4MGYxMDUzMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjb7ADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAS9HT/2keHVxGLTfGWUijdmhrHhI7acu9m/5gCoTrJln9dia7LKY3kcZ3nExH
Y0nRDFgOvHNd1+e0JHP8KJqtV0dyxnvEXidZu1YbAyGpf8YA3cqwFFdxrQ80Fscf
JZZuIES8y/kQka7yt5+igEl4Og4U0mGvWrNuGze5RyHyAt5erKBbXNN/IJ+/kVRw
zaZNp1A8O/bOaZFKDZOp4+T99FJPu6MrSHql0i1f1fdzz4NCa8cIavBodQCulkY3
czGnhmHi2zLaFMw6LL+a66Qhu7Rm9sN4GRioEB3UohSE119VSLEw2CjVLBv39e3h
ExzROO9UDd8OYSE8If41cty+NQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:15 2025 by rpki-client