Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8d9cb53-291a-3627-b0b1-acbca378a6e9.roa
File: c8d9cb53-291a-3627-b0b1-acbca378a6e9.roa (raw, json)
Hash identifier: hFEBKOWMoblA9nr8ULo9kN8XLSfl3nnzKsqBRAlrK0A=
Subject key identifier: F2:C5:FE:39:4E:33:C2:47:1E:FE:10:3E:A7:4C:01:2B:21:D4:AC:E2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C2F6B9D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8d9cb53-291a-3627-b0b1-acbca378a6e9.roa
Signing time: Wed 10 Oct 2018 04:15:03 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2f:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=8144873b-271a-40f2-bc06-8e827641cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:b6:1d:62:5c:e3:cc:a7:b6:97:ba:79:83:
c8:b9:28:37:b7:82:e8:42:ed:27:d5:55:30:e5:9f:
9e:3f:fd:a3:c4:5a:a1:1d:c9:5e:e5:b4:8f:b5:f5:
95:6a:37:15:d8:ca:d6:d7:5e:52:ba:33:0c:e8:d2:
3f:93:56:25:f6:d0:01:01:9a:0e:32:42:fd:a1:7b:
91:85:5a:07:ba:59:e4:2b:b5:1a:2a:eb:3b:14:46:
a8:93:70:a3:89:a5:ac:90:a8:b5:44:26:12:b9:db:
45:36:c4:17:13:0e:87:78:80:17:d3:fa:2b:82:80:
17:eb:fa:1e:49:6b:16:20:b8:29:d0:da:30:c0:53:
c5:1a:2a:6a:2a:7b:91:53:3e:de:94:20:05:78:f1:
6f:42:8e:87:1c:45:10:49:e0:c6:b9:35:3f:46:9a:
ad:ef:8c:fd:8d:7f:c6:53:9a:81:82:25:f5:90:f0:
5d:96:1d:48:bc:78:0f:c7:6f:8f:e9:29:d9:08:7d:
30:1c:b4:a1:a5:45:5f:01:03:88:dc:98:f4:a7:34:
c0:7e:90:2a:9e:63:93:88:d7:dc:0e:15:1a:16:1b:
ed:c5:62:01:7b:bd:cf:aa:bb:af:d4:ea:5a:c6:92:
d9:a8:ff:4a:93:d1:ce:80:60:ed:91:87:75:95:e9:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:FE:39:4E:33:C2:47:1E:FE:10:3E:A7:4C:01:2B:21:D4:AC:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8d9cb53-291a-3627-b0b1-acbca378a6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2c:c5:3b:e0:33:57:87:6a:9e:d6:04:59:1d:25:66:3f:65:
65:9a:49:1b:f3:a4:3d:6a:68:1f:58:af:49:56:cd:c8:d3:9a:
21:a1:81:b9:f8:c3:46:2a:43:d0:b8:fd:ed:77:6f:8a:99:a0:
52:83:50:55:0f:3a:ce:a3:f0:5c:3e:c3:55:90:17:c1:00:2b:
04:cb:e8:c3:c5:6e:6c:e1:ab:b8:05:4a:43:99:82:e7:17:36:
ed:70:5d:9e:71:1e:78:2d:e1:1e:29:d6:1d:b6:2f:9a:59:9d:
93:3a:57:4f:3d:b1:70:44:ed:8c:ce:c2:d6:b0:af:a2:ad:94:
c1:72:e8:f3:92:da:51:63:72:8f:bb:e4:ae:5e:b2:4e:ca:52:
5a:3e:81:a7:37:e5:8e:f0:7a:0f:06:53:83:55:2a:71:bb:6b:
1d:c7:fe:21:f1:0f:6f:30:5d:ed:60:d1:18:ec:91:f9:7a:26:
07:8c:1b:8e:94:91:89:1e:2a:fd:32:f7:86:5a:ab:bb:ce:4d:
10:d0:0b:c1:43:78:67:47:68:95:9d:bb:fe:13:0b:35:0a:97:
a8:0f:0c:91:8b:9c:ec:93:2d:f3:0f:f7:6f:23:ca:8f:67:df:
e7:1f:47:50:1b:70:1a:2a:ef:f3:07:a6:d0:6a:29:ac:5a:87:
42:75:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:08 2025 by rpki-client