Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07ad07e-39e6-3e35-8315-6fe03be0a16b.roa
File: c07ad07e-39e6-3e35-8315-6fe03be0a16b.roa (raw, json)
Hash identifier: 0dvJcb6vdsHLB4c7rsUBrZFzxxNF7n3fgTubYj4N7HU=
Subject key identifier: F1:0D:49:2B:2B:53:96:61:AD:06:08:EE:28:43:7C:E6:68:6E:58:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD43D63
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07ad07e-39e6-3e35-8315-6fe03be0a16b.roa
Signing time: Wed 10 Oct 2018 07:15:05 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 52.94.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=60c1ad61-365a-4a03-a9d3-7f9b2781f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:f5:87:26:3e:da:81:b2:65:9c:d0:be:0d:
15:92:95:29:22:a8:93:44:31:13:73:28:68:ac:59:
72:97:9c:8f:92:1c:96:56:66:e0:3b:f8:96:8e:83:
16:5b:87:ca:3c:3d:88:2e:7c:d9:7b:07:44:c4:e0:
3d:dc:a3:f6:ad:67:cb:a7:95:12:40:34:94:ff:19:
97:fd:de:7f:a8:d3:40:dd:6b:32:68:e4:1e:b6:6c:
b0:00:55:3c:b9:b0:bf:6a:53:7d:c0:98:5b:a0:21:
a7:63:18:4f:fb:d5:ed:b9:ec:61:52:48:16:3b:09:
6c:17:29:11:f6:e9:0b:d7:7e:79:ac:55:92:9a:e2:
5c:4f:37:1e:2d:0a:cd:6c:62:59:23:12:eb:29:3d:
d2:ba:91:87:64:82:6c:69:5f:2e:44:aa:40:c5:52:
26:fb:5e:e9:e1:67:1c:c8:db:04:0a:82:ab:ed:7a:
49:ff:9b:2f:0e:1e:cf:5b:2d:87:d2:f6:38:cf:27:
c3:25:18:14:d7:78:a0:41:5d:52:66:bd:fb:59:5f:
de:8f:4f:37:75:60:7d:51:30:84:a6:70:4f:1f:ca:
54:74:46:86:8d:ba:2a:02:b2:78:be:58:05:92:e7:
93:87:7c:13:f9:ed:82:13:d0:34:97:7c:30:11:d3:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:49:2B:2B:53:96:61:AD:06:08:EE:28:43:7C:E6:68:6E:58:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07ad07e-39e6-3e35-8315-6fe03be0a16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:43:53:f2:60:34:f3:e5:3d:3f:fa:4a:a7:f9:5a:3d:31:7c:
88:8b:a0:8c:32:c8:e8:74:ad:36:ca:d4:f4:99:f2:96:96:d6:
64:55:a5:2b:b1:e9:b2:95:fa:4c:a9:ec:37:78:27:ef:99:de:
e0:95:df:76:0e:37:62:d7:0d:56:bf:e9:b1:2d:05:31:6c:38:
39:45:34:1c:d7:c4:54:15:4e:01:a4:55:6a:5e:02:6b:8d:ab:
f4:5c:fb:7e:83:50:90:be:ba:eb:35:07:30:4b:0f:7f:df:98:
2e:33:4a:75:80:e5:c9:f6:3b:42:e2:8d:e2:bf:4b:3e:76:13:
07:20:90:76:92:e4:b5:f6:1a:d1:2b:28:46:8f:e7:ca:fa:de:
bf:28:58:5f:d3:30:1d:7d:ed:10:8b:1e:f4:fa:d9:bd:bf:84:
58:07:f3:ef:26:c4:e5:60:d0:4e:81:21:5f:40:9e:4b:f6:26:
bb:72:41:8e:10:62:df:61:29:7c:21:e6:bf:86:75:32:5c:29:
d0:62:2f:28:2f:d7:bb:28:02:e9:7b:02:0e:62:8c:bf:41:5d:
0b:68:1e:3b:18:98:2f:2c:61:f8:12:08:cd:bb:e1:62:b8:43:
dc:fe:61:9c:ee:ca:20:63:82:67:7e:6c:63:6b:38:61:f9:38:
47:8e:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:52 2025 by rpki-client