Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc397491-2520-3081-b77b-db33d3e90573.roa
File: bc397491-2520-3081-b77b-db33d3e90573.roa (raw, json)
Hash identifier: 3QjHDepXghyA/WA8MQdPDUin6mesZfewrThPmzw8/ZY=
Subject key identifier: 24:48:95:05:47:CE:C9:FA:D2:5D:3D:5F:AD:71:BC:55:9E:A6:24:69
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B4D171
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc397491-2520-3081-b77b-db33d3e90573.roa
Signing time: Sun 21 Oct 2018 08:19:07 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.231.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:d1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=9c9a7539-4a5e-49b1-8c55-ff88b6202584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:01:00:f3:0f:00:6f:60:cb:2b:ee:34:7e:
a2:77:25:0b:d6:97:c6:c5:93:f1:33:45:ba:fa:d1:
8c:be:74:e8:00:80:9c:75:37:e0:3f:c0:60:25:61:
f2:2c:46:e1:d9:db:ac:d9:55:53:57:4a:ec:f5:d7:
6f:9d:86:7a:0b:4f:b4:fc:92:97:e2:52:6c:f7:76:
e9:e5:86:e8:2b:e6:cb:ff:ba:cf:5b:f7:04:e6:55:
ba:f1:3e:bb:9f:b6:d4:47:67:de:f2:51:08:c2:5d:
e0:85:3e:09:0f:41:19:a0:d3:39:8e:e6:06:af:f6:
69:62:ae:87:84:3d:98:76:84:ad:7c:37:04:94:31:
4b:0e:f4:31:eb:6f:e9:b8:84:37:82:70:a4:30:9e:
15:9e:45:6c:f2:75:b9:95:a1:1e:0e:7e:4e:01:49:
eb:1e:c8:c2:95:a2:05:26:68:13:15:e8:17:46:d1:
24:18:72:92:ab:f9:c9:fe:68:a1:d8:38:7b:78:5a:
8e:2d:93:69:1c:3d:34:e7:29:53:f7:7a:01:7a:86:
ab:46:7a:4a:7d:e2:c9:3d:90:b7:ca:08:f3:39:4b:
4f:ed:4a:91:50:6c:52:b5:7e:97:5a:db:82:e5:2f:
fe:70:17:29:a9:f6:85:83:0b:aa:20:56:de:da:3f:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:95:05:47:CE:C9:FA:D2:5D:3D:5F:AD:71:BC:55:9E:A6:24:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc397491-2520-3081-b77b-db33d3e90573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:58:79:50:66:66:b9:0d:72:a5:0c:ec:6f:85:59:52:0a:a4:
af:d3:04:e6:bd:49:2c:34:85:cd:f6:2b:69:43:8f:bf:b4:35:
89:15:2e:8b:a4:1c:3e:ac:c0:eb:c0:76:f1:50:ab:93:19:f0:
d3:ac:d7:fd:26:5b:89:10:cc:bb:dd:3a:24:27:3e:e3:45:41:
62:84:7d:a9:81:f6:bb:5a:a5:c6:67:c2:1e:14:65:34:8d:93:
e2:91:6a:f3:14:52:12:b2:f4:37:0f:23:4a:f0:70:cc:27:54:
44:e4:5d:d1:dc:34:08:09:7d:1f:75:d8:28:1c:24:8b:a0:05:
60:a5:01:29:e5:ba:e8:ca:4e:a5:32:ba:50:87:fc:20:f3:b1:
36:1a:8a:9a:fa:6f:7f:f1:aa:df:bd:40:d0:aa:6e:fc:3a:0f:
dd:63:d3:43:06:61:ac:e9:5c:7e:73:d0:d2:27:e5:c0:10:dd:
1f:ec:8b:ff:8b:9b:31:d2:19:f1:7d:bf:bc:2d:20:85:9e:2f:
c5:eb:aa:fe:a2:e2:af:70:a5:4a:a5:da:69:c7:ef:c4:9c:e2:
b6:82:7c:13:c3:95:cf:bd:a7:e7:92:76:a1:12:da:34:3d:c1:
d5:6e:84:3c:a1:c4:b7:bc:0f:8f:c7:75:cc:2c:0f:a7:5d:ed:
33:88:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:58 2025 by rpki-client