Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c828f0e6-5cf8-3988-87de-5e391cae34dd.roa
File: c828f0e6-5cf8-3988-87de-5e391cae34dd.roa (raw, json)
Hash identifier: gOQqL7DFg2OtIBcN12jwT9aoNkMBCt/HYqUArFIkJ08=
Subject key identifier: C7:35:CB:DC:55:CF:49:71:FA:5D:21:87:82:E0:6D:D2:94:3C:F2:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A9F149
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c828f0e6-5cf8-3988-87de-5e391cae34dd.roa
Signing time: Wed 19 Dec 2018 04:12:10 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a9:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=2dbe390e-6c64-400a-83c8-cb6cb6e303d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:63:bc:94:62:51:29:c4:7f:f4:97:e0:2f:
60:7b:fc:45:ff:ce:29:39:19:c1:3f:9e:f3:51:9b:
e6:cf:1d:10:1a:56:dd:71:b7:69:d4:cd:09:2a:58:
af:dd:cb:be:99:6f:92:59:d6:cc:46:7a:af:7d:69:
6e:b4:0e:57:08:19:61:a1:db:8a:a0:cd:7b:5b:d1:
0d:2d:e4:b7:f3:cd:c6:d9:73:d9:9d:d0:9b:c1:34:
33:bc:83:84:c4:0f:c9:8d:28:2c:cc:f7:7b:94:ad:
30:ab:94:e0:21:33:55:e0:21:e5:ed:31:31:d2:ca:
7b:de:83:ef:a3:c1:85:d2:18:b5:14:f9:e6:a0:7e:
4b:e2:8b:51:6c:bd:78:b2:f7:33:67:ee:91:da:f6:
cb:d8:fe:4e:8c:94:3a:b1:f7:4d:6b:5c:b8:08:cb:
f1:dc:bb:fe:46:c0:ff:d0:71:48:ae:bc:4d:fc:4a:
58:1f:6b:fb:74:77:df:01:c4:83:a0:61:e8:cf:d1:
ea:8b:e5:bc:2f:a4:94:98:00:1c:cf:6c:a0:5d:e5:
14:6c:d5:0d:01:03:00:94:61:cc:3c:4e:f3:ab:f7:
1d:77:5b:ad:2c:58:ce:d2:1e:ac:34:88:ad:c3:24:
2a:88:70:9e:9f:6c:ac:c1:57:ad:96:db:a0:1e:a8:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:CB:DC:55:CF:49:71:FA:5D:21:87:82:E0:6D:D2:94:3C:F2:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c828f0e6-5cf8-3988-87de-5e391cae34dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:89:ed:65:f2:6c:0f:93:82:61:a6:12:28:9a:3c:46:9e:dc:
43:ba:fb:cf:6d:36:73:6c:fa:a3:89:3b:fe:2d:79:4f:83:3e:
00:6f:06:be:1a:52:74:fb:a1:90:f0:64:06:50:8a:68:c4:32:
09:88:d5:b2:c5:2e:1c:7e:06:fa:bf:b0:3f:6a:45:ce:79:9e:
9a:e7:1a:3e:66:f8:e1:2e:1e:b6:80:1d:23:ac:d1:a8:9d:d5:
01:25:5b:d4:59:7e:a6:c6:f8:a4:c3:b3:22:b8:12:9f:34:4a:
b1:60:4a:70:be:68:9b:eb:82:13:9d:ae:c3:90:85:d0:8e:37:
d0:50:1d:49:bd:ce:86:e7:64:a3:eb:42:5a:18:f7:4b:ca:58:
1b:3e:06:9c:3b:87:3a:06:b7:93:b1:1b:70:27:e1:63:c0:dc:
74:ff:44:7d:7d:6c:89:94:1d:f0:b2:d0:47:8a:35:8a:19:7e:
47:2c:95:1e:e6:9e:ba:8a:a9:07:5b:17:fe:60:e6:94:99:19:
7d:ac:54:21:fa:69:f3:2b:77:3e:33:55:65:f8:6b:2d:6e:26:
ba:38:f2:bc:d9:0a:4d:50:4b:1d:02:e8:95:d0:0a:5d:ad:7b:
7f:5c:76:96:a7:97:c2:11:38:ef:4e:13:3f:be:62:1d:e8:4f:
ea:94:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:53:43 2025 by rpki-client