Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad8ed4e0-e90c-3388-9e7e-77e744515b6f.roa
File: ad8ed4e0-e90c-3388-9e7e-77e744515b6f.roa (raw, json)
Hash identifier: 10ugeoUfmpmiVZ/cUz2DATFSJyghZTEZ8OORsTTVbLE=
Subject key identifier: 9D:FF:B0:EE:3D:00:53:2E:E4:2F:C9:08:DC:EE:E8:61:32:65:3C:23
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B31CD7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad8ed4e0-e90c-3388-9e7e-77e744515b6f.roa
Signing time: Sun 21 Oct 2018 08:17:15 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.95.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2b2d6920-44ab-49f2-8573-c5c035538812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:56:83:a2:70:c5:d1:de:8f:d8:67:4a:21:
1d:e4:20:67:91:8c:ff:fb:ac:e1:73:3a:e4:88:28:
e9:8a:6f:3c:49:34:b5:01:2d:63:56:84:23:7c:21:
d9:a8:03:5a:2c:e2:43:3f:b9:b5:bf:de:7f:5b:9c:
40:5b:49:02:b9:c5:94:32:37:f7:c0:d7:da:00:92:
1e:26:35:68:c0:9e:af:5b:ea:1b:33:44:db:99:7e:
7a:cf:c7:83:02:32:c7:8a:48:56:d5:a9:cd:ef:9b:
b7:01:13:ca:f1:44:f5:e0:15:8c:c7:bd:e0:ab:08:
c7:e8:e4:a5:b1:76:4f:21:71:46:dd:b2:a5:09:75:
f6:55:8e:0e:c7:d4:52:ad:cc:c4:bb:23:74:a1:21:
f3:0e:09:12:6f:fc:99:d2:fe:7d:6b:aa:1a:3d:e1:
2b:e2:96:f6:1a:8a:71:32:f4:cd:fb:f3:6f:c3:4a:
3a:92:67:38:c2:33:86:6d:54:69:61:0f:7d:74:d2:
2f:cc:44:34:d9:a2:75:6f:d4:9d:0d:31:3b:6e:86:
2d:15:ba:60:f6:1e:a3:88:c2:ca:ec:5b:e2:89:27:
8b:7e:7e:a3:be:8e:c2:fd:60:ae:88:5b:b0:ff:b1:
f6:5e:9d:f0:e8:18:1f:99:d9:db:e4:46:02:c7:1e:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:B0:EE:3D:00:53:2E:E4:2F:C9:08:DC:EE:E8:61:32:65:3C:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad8ed4e0-e90c-3388-9e7e-77e744515b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:44:fa:3c:f6:de:14:e3:0e:8c:43:6e:83:c9:9b:28:1c:71:
3a:c5:5e:c0:d4:c1:5c:5a:9c:8c:2a:f7:ab:6c:1f:b5:79:78:
34:76:44:42:56:33:26:c0:58:70:ca:cc:20:f1:6f:3d:10:6a:
33:64:2f:98:7f:3c:49:6d:79:9a:90:5a:ec:25:cd:df:76:33:
0c:74:15:bf:07:16:68:de:13:23:6f:7d:7e:82:9c:68:c5:39:
a4:1c:13:3b:78:02:ed:19:9c:bd:be:c0:78:14:cf:30:45:c5:
61:6e:80:fa:55:cc:c2:b7:00:1d:82:a9:48:c1:fd:ab:27:fe:
86:34:d5:fc:44:57:60:e6:0c:8d:9e:a7:e3:4b:65:5f:aa:61:
42:e5:91:42:7f:e6:49:a4:f6:e8:e5:03:ba:5f:e0:3e:37:c5:
da:a5:cb:2f:e3:fa:8f:88:87:e8:34:2b:20:f7:1a:b8:5b:b8:
b1:d8:17:51:80:99:46:f3:b9:2a:6c:02:0e:5c:2b:ae:15:0a:
d5:fe:70:ae:c0:09:2e:13:8f:d9:9b:92:ed:47:26:55:18:ab:
68:37:fb:dc:8d:86:04:f4:32:51:ac:90:7b:b3:49:c2:40:66:
12:dc:93:0d:59:27:9c:1c:a0:89:e8:31:30:21:9c:aa:61:6d:
ba:17:9f:6f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWzHNcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDJi
MmQ2OTIwLTQ0YWItNDlmMi04NTczLWM1YzAzNTUzODgxMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOO6VoOicMXR3o/YZ0ohHeQgZ5GM//us4XM65Igo
6YpvPEk0tQEtY1aEI3wh2agDWiziQz+5tb/ef1ucQFtJArnFlDI398DX2gCSHiY1
aMCer1vqGzNE25l+es/HgwIyx4pIVtWpze+btwETyvFE9eAVjMe94KsIx+jkpbF2
TyFxRt2ypQl19lWODsfUUq3MxLsjdKEh8w4JEm/8mdL+fWuqGj3hK+KW9hqKcTL0
zfvzb8NKOpJnOMIzhm1UaWEPfXTSL8xENNmidW/UnQ0xO26GLRW6YPYeo4jCyuxb
4okni35+o76Owv1grohbsP+x9l6d8OgYH5nZ2+RGAsceCHECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSd/7DuPQBTLuQvyQjc7uhhMmU8IzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2FkOGVkNGUwLWU5MGMtMzM4
OC05ZTdlLTc3ZTc0NDUxNWI2Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRfIjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACkT6PPbeFOMOjENug8mbKBxxOsVewNTBXFqcjCr3q2wftXl4NHZEQlYzJsBY
cMrMIPFvPRBqM2QvmH88SW15mpBa7CXN33YzDHQVvwcWaN4TI299foKcaMU5pBwT
O3gC7Rmcvb7AeBTPMEXFYW6A+lXMwrcAHYKpSMH9qyf+hjTV/ERXYOYMjZ6n40tl
X6phQuWRQn/mSaT26OUDul/gPjfF2qXLL+P6j4iH6DQrIPcauFu4sdgXUYCZRvO5
KmwCDlwrrhUK1f5wrsAJLhOP2ZuS7UcmVRiraDf73I2GBPQyUayQe7NJwkBmEtyT
DVknnBygiegxMCGcqmFtuhefbw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:57 2025 by rpki-client