Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c78435e0-a6d0-32ba-8598-64df8758cd07.roa
File: c78435e0-a6d0-32ba-8598-64df8758cd07.roa (raw, json)
Hash identifier: 0OdH1PItYqkbGrWDX9edMpC09bV8PdMglRCBdsOqKWA=
Subject key identifier: 84:F6:2B:DE:F3:8A:E3:39:D2:A7:54:54:C6:A9:5B:04:C3:83:EA:7F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1669631E528
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c78435e0-a6d0-32ba-8598-64df8758cd07.roa
Signing time: Sun 21 Oct 2018 10:35:44 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=061ae8c8-3799-415e-9c9b-cfaf37942c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:f6:fe:4a:c0:dc:7b:6c:f6:0f:39:c1:48:
b4:61:0a:13:76:dd:83:a7:55:b3:17:1c:c5:b4:fe:
ae:a0:45:1b:47:99:9e:79:31:a3:2b:02:d6:32:a7:
69:6f:5b:da:f3:a2:f1:8d:2a:5c:8a:83:16:f0:64:
e3:9f:e9:ce:ff:0b:05:0a:d4:1f:6e:2b:85:60:17:
ea:1f:54:3d:cb:7d:19:0a:4a:9e:0d:e7:03:9b:7e:
79:e1:3f:2d:6a:2a:d4:c5:2f:de:25:ec:1c:56:2a:
84:5a:82:9c:74:00:84:66:49:e3:40:9c:88:9b:1f:
cb:53:a1:3e:7c:5f:0a:91:c2:8d:63:fb:1d:e1:34:
bd:fd:d9:53:4e:a9:2e:cd:ac:2a:b0:a8:e2:24:dd:
88:4f:b4:1f:18:04:cf:04:fd:be:0e:00:a4:19:9e:
c9:9b:1a:8c:5a:12:da:a1:15:82:78:38:f6:1d:67:
a2:67:31:7d:8e:ef:c6:f7:3e:fb:83:3b:d3:0b:a1:
87:21:00:21:92:a2:f7:f7:ba:6d:d1:23:b9:ad:56:
53:da:7a:5c:72:ac:96:75:42:e6:a3:bb:58:65:59:
7f:72:d0:e8:44:22:80:7a:fb:0a:0a:80:63:f7:e9:
12:3e:62:c7:6c:8d:e9:2e:1c:84:68:2c:1b:dd:65:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:2B:DE:F3:8A:E3:39:D2:A7:54:54:C6:A9:5B:04:C3:83:EA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c78435e0-a6d0-32ba-8598-64df8758cd07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b1:70:1b:96:28:c1:5e:5e:70:fb:5f:ec:e0:d7:64:b3:89:
14:0f:c8:04:7c:21:08:b2:22:8e:f6:65:3c:34:54:26:3b:c4:
8d:d7:2c:38:63:fb:77:bb:1c:3c:70:e6:f2:ef:59:a1:cc:0c:
99:5c:2c:4b:06:4f:61:82:f8:7f:8a:47:88:a0:c2:c9:65:eb:
54:4b:15:ed:95:08:88:2f:1d:ef:63:b8:cb:64:4d:50:27:d8:
b6:8b:a9:2e:29:36:48:87:e9:7e:bd:4c:7b:f9:32:83:95:8b:
54:32:75:df:89:af:56:e9:22:c5:b2:83:db:f3:af:7d:6a:78:
68:06:38:85:94:e2:f2:22:69:4e:bb:5a:a8:10:0d:1b:1a:9c:
f8:1b:08:c2:2d:75:3f:df:03:8c:e3:f4:f7:87:82:67:fb:0e:
ef:b9:1a:8b:2d:83:79:5c:01:ed:df:60:23:49:11:6c:af:b6:
ba:dd:69:1a:f3:16:d4:32:88:4b:dd:a5:11:52:af:0c:54:d5:
66:a6:be:a5:62:82:3c:b3:3d:67:83:ce:36:be:ef:9c:c4:2e:
dc:06:ae:4e:59:6f:58:72:c3:7a:34:76:1f:96:8c:4c:eb:6e:
b3:b4:65:97:02:22:76:0e:ad:38:60:04:29:b2:fe:12:87:0f:
61:e8:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:50 2025 by rpki-client