Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7c7b699-6f02-32f9-beea-41617533bbe7.roa
File: c7c7b699-6f02-32f9-beea-41617533bbe7.roa (raw, json)
Hash identifier: v3ij2EwN0TFIFC1JeVBOBREX/BYTTqpuQTDNqHDv3js=
Subject key identifier: 0C:59:30:73:86:09:8D:5D:55:5A:5E:E9:10:F4:73:EB:B9:0C:7D:C3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16693C751AF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7c7b699-6f02-32f9-beea-41617533bbe7.roa
Signing time: Sat 20 Oct 2018 23:20:05 +0000
ROA not before: Sat 20 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:51:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=e48b5814-3410-4d32-a68a-9ba96414c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:d7:9b:a5:ac:49:b2:a6:38:92:ad:b3:27:
f6:33:6b:01:89:29:a3:c1:03:5d:aa:4a:06:be:80:
dc:4e:74:10:16:aa:54:38:4d:a1:07:b0:7e:79:2b:
64:aa:d1:2f:62:4e:b0:9a:e9:35:0f:90:ea:24:d6:
f5:98:d2:61:6e:33:0a:04:f6:47:bd:2e:5a:3e:70:
04:42:c8:92:38:73:e8:e7:66:d1:77:69:95:c6:a9:
6c:5e:ab:0d:65:e0:04:6f:6f:73:a9:0a:2a:78:77:
04:ce:1d:eb:3f:44:da:d9:3e:72:80:3a:8c:fd:f9:
1c:38:bb:3e:59:6f:ca:24:87:18:29:fe:69:80:bd:
aa:9f:08:77:e5:32:c0:35:bf:ee:1d:0d:50:26:16:
2b:e6:68:a1:50:a1:87:07:b3:20:52:ac:c8:97:42:
dd:73:f7:e4:73:59:18:44:06:9f:47:f0:9e:62:8b:
68:23:b8:63:1e:85:b4:56:58:14:80:c5:08:a6:2d:
2c:8e:e4:ef:b9:75:ed:ae:46:b2:94:59:0d:ce:fe:
fe:73:c1:13:82:4a:ed:52:38:07:a8:09:ac:cb:2d:
15:35:6c:13:39:8f:af:e9:41:55:dc:1f:e6:85:0d:
73:19:fd:2b:82:b2:cc:76:ad:dd:32:5b:9f:a1:85:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:30:73:86:09:8D:5D:55:5A:5E:E9:10:F4:73:EB:B9:0C:7D:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7c7b699-6f02-32f9-beea-41617533bbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ac:da:2c:0a:27:eb:fb:04:fd:2e:a7:90:5a:fe:dc:55:1d:
f8:4c:51:8b:b9:79:bf:fb:3e:cd:8f:7f:a2:b0:05:de:0c:fb:
20:b1:21:4f:a0:5b:87:2b:ed:53:a5:a9:7e:62:d1:1e:76:51:
b8:31:3b:e4:b0:09:6f:93:e0:8f:96:18:c6:f9:fb:b5:4a:b2:
8f:0f:97:7b:93:6d:a1:73:27:9d:62:6f:f1:05:03:10:64:71:
7b:fd:01:38:05:5d:61:63:ee:62:cd:e5:ad:5d:27:e0:b3:5a:
e5:1a:28:fa:63:42:85:25:f8:8b:7a:07:ca:e0:e4:09:67:60:
84:44:e8:f2:de:ac:82:58:4a:f3:70:f0:cf:1f:6d:75:cf:d4:
02:47:9f:37:86:d8:5d:7a:0e:f4:f3:c2:ec:30:84:3e:bb:6c:
bb:0c:f1:6b:13:51:75:8b:46:aa:71:21:8c:35:93:ad:f1:f9:
70:12:43:c2:05:88:fe:44:92:4d:10:b7:1e:7b:43:a1:0a:48:
d0:9d:33:d6:e4:5e:7e:52:5a:d9:96:6f:5d:02:d5:e1:55:75:
16:a2:a4:47:3f:1c:cb:e1:2e:74:14:9a:a6:82:ec:c0:fa:f9:
1e:92:53:9e:a6:87:b4:a1:6f:43:0e:90:ec:90:85:db:cb:c6:
6b:7e:44:e6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpPHUa8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGU0
OGI1ODE0LTM0MTAtNGQzMi1hNjhhLTliYTk2NDE0YzcxMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMvw15ulrEmypjiSrbMn9jNrAYkpo8EDXapKBr6A
3E50EBaqVDhNoQewfnkrZKrRL2JOsJrpNQ+Q6iTW9ZjSYW4zCgT2R70uWj5wBELI
kjhz6Odm0XdplcapbF6rDWXgBG9vc6kKKnh3BM4d6z9E2tk+coA6jP35HDi7Pllv
yiSHGCn+aYC9qp8Id+UywDW/7h0NUCYWK+ZooVChhwezIFKsyJdC3XP35HNZGEQG
n0fwnmKLaCO4Yx6FtFZYFIDFCKYtLI7k77l17a5GspRZDc7+/nPBE4JK7VI4B6gJ
rMstFTVsEzmPr+lBVdwf5oUNcxn9K4KyzHat3TJbn6GF9oECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQMWTBzhgmNXVVaXukQ9HPruQx9wzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2M3YzdiNjk5LTZmMDItMzJm
OS1iZWVhLTQxNjE3NTMzYmJlNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRfkzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjazaLAon6/sE/S6nkFr+3FUd+ExRi7l5v/s+zY9/orAF3gz7ILEhT6Bbhyvt
U6WpfmLRHnZRuDE75LAJb5Pgj5YYxvn7tUqyjw+Xe5NtoXMnnWJv8QUDEGRxe/0B
OAVdYWPuYs3lrV0n4LNa5Roo+mNChSX4i3oHyuDkCWdghETo8t6sglhK83Dwzx9t
dc/UAkefN4bYXXoO9PPC7DCEPrtsuwzxaxNRdYtGqnEhjDWTrfH5cBJDwgWI/kSS
TRC3HntDoQpI0J0z1uReflJa2ZZvXQLV4VV1FqKkRz8cy+EudBSapoLswPr5HpJT
nqaHtKFvQw6Q7JCF28vGa35E5g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:06 2025 by rpki-client