Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a9d3c1-1062-32d2-8249-664c2dd02eb6.roa
File: c0a9d3c1-1062-32d2-8249-664c2dd02eb6.roa (raw, json)
Hash identifier: bZkQ4qn2/SWUVHFLnzrG4l4QJj41jyLpuoB3muXeo6g=
Subject key identifier: 37:F3:DA:8E:E0:25:01:5B:EB:74:5C:CB:8B:2F:39:93:4C:F5:85:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A839B5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a9d3c1-1062-32d2-8249-664c2dd02eb6.roa
Signing time: Wed 19 Dec 2018 04:10:18 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a8:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d7c9bc37-6502-4128-b41e-940f0b740113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:9f:2c:23:f6:3a:21:07:1a:ac:5d:32:58:
38:58:ce:a8:4c:37:9c:e7:13:de:ed:c0:01:01:b3:
81:68:e9:d7:44:d5:d1:a0:df:f8:9b:c4:08:30:45:
66:a3:f0:b3:85:85:30:02:21:81:5b:dd:25:eb:84:
a9:11:e6:d2:a4:bb:32:4a:6b:6e:41:f7:5f:cf:fd:
25:fd:dd:48:66:0f:76:1e:c6:4d:35:e5:87:e9:38:
48:a2:8c:5c:09:b3:56:fd:a0:4e:1c:3d:f7:be:1a:
29:28:88:f7:30:3e:b9:6c:dd:99:eb:39:ed:de:5b:
91:16:ba:3c:30:34:f2:25:99:cc:99:cf:46:41:ac:
d1:ad:93:b6:fb:89:6f:e7:29:6f:8a:9a:bd:fb:1a:
14:86:c5:6e:81:cd:c2:1a:c0:a3:e5:db:4e:86:8a:
32:bc:6f:92:62:7c:9e:ef:3d:ca:38:0d:08:25:57:
7b:7d:cf:d6:cb:4a:04:00:b8:de:7e:e3:f1:f6:71:
70:90:6f:d0:b8:e0:40:68:b2:b1:0b:4d:c9:99:d2:
e0:a7:a2:04:fb:38:9b:bb:06:f2:51:cd:c8:c6:9b:
c0:94:43:0d:3d:d4:e3:de:1f:bf:9e:6b:a1:6e:1c:
3e:ae:ac:a9:d9:ac:52:63:a2:78:71:98:2d:82:b7:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:DA:8E:E0:25:01:5B:EB:74:5C:CB:8B:2F:39:93:4C:F5:85:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a9d3c1-1062-32d2-8249-664c2dd02eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:dd:2e:5f:c2:09:c6:a9:b7:a6:d3:58:6c:9f:a3:e1:13:a1:
9c:3c:3c:0b:fc:c8:7e:ba:3f:c8:88:62:24:73:11:8d:f9:52:
46:f0:65:4e:5f:82:74:4b:ff:4b:2a:2a:96:dd:0e:08:d0:38:
15:8f:bd:e8:95:ee:e3:37:c6:fa:7d:7d:3b:1e:ee:6d:d6:98:
fa:c8:93:0d:67:5a:bd:6a:a8:f4:23:89:5d:9c:2a:03:1e:d6:
db:ff:48:64:1d:ac:84:ff:51:5e:41:3b:51:1d:8e:ff:29:d4:
15:44:cf:6b:f6:36:b2:7b:43:09:08:09:42:b6:6e:14:1c:56:
24:6f:e5:4b:89:16:65:14:f1:8b:ad:e5:6c:54:41:f1:e1:fb:
8e:17:f9:90:1d:5b:c4:94:99:c7:72:70:9c:c1:4a:01:50:17:
80:8d:86:32:68:b0:ef:9a:17:a9:ce:c1:bd:01:49:08:0f:de:
b7:1c:0c:e6:23:df:f2:e7:2f:ef:32:af:d6:4d:62:68:06:24:
01:da:88:b3:9e:66:9c:46:0e:43:1c:b9:c0:40:7e:33:00:99:
61:21:a2:e8:cc:91:63:60:6c:de:1a:a9:32:fc:c8:d9:75:43:
73:85:31:41:47:75:e4:f7:6f:6b:56:34:70:77:8e:61:a1:8f:
a6:6a:9e:8b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SoObUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGQ3
YzliYzM3LTY1MDItNDEyOC1iNDFlLTk0MGYwYjc0MDExMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALsxnywj9johBxqsXTJYOFjOqEw3nOcT3u3AAQGz
gWjp10TV0aDf+JvECDBFZqPws4WFMAIhgVvdJeuEqRHm0qS7MkprbkH3X8/9Jf3d
SGYPdh7GTTXlh+k4SKKMXAmzVv2gThw9974aKSiI9zA+uWzdmes57d5bkRa6PDA0
8iWZzJnPRkGs0a2TtvuJb+cpb4qavfsaFIbFboHNwhrAo+XbToaKMrxvkmJ8nu89
yjgNCCVXe33P1stKBAC43n7j8fZxcJBv0LjgQGiysQtNyZnS4KeiBPs4m7sG8lHN
yMabwJRDDT3U494fv55roW4cPq6sqdmsUmOieHGYLYK3LR8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ389qO4CUBW+t0XMuLLzmTTPWFKDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2MwYTlkM2MxLTEwNjItMzJk
Mi04MjQ5LTY2NGMyZGQwMmViNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADbn4zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAgt0uX8IJxqm3ptNYbJ+j4ROhnDw8C/zIfro/yIhiJHMRjflSRvBlTl+CdEv/
Syoqlt0OCNA4FY+96JXu4zfG+n19Ox7ubdaY+siTDWdavWqo9COJXZwqAx7W2/9I
ZB2shP9RXkE7UR2O/ynUFUTPa/Y2sntDCQgJQrZuFBxWJG/lS4kWZRTxi63lbFRB
8eH7jhf5kB1bxJSZx3JwnMFKAVAXgI2GMmiw75oXqc7BvQFJCA/etxwM5iPf8ucv
7zKv1k1iaAYkAdqIs55mnEYOQxy5wEB+MwCZYSGi6MyRY2Bs3hqpMvzI2XVDc4Ux
QUd15Pdva1Y0cHeOYaGPpmqeiw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:35 2025 by rpki-client