Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c969a0fc-9ef1-3fe0-a042-acf15be6ba74.roa
File: c969a0fc-9ef1-3fe0-a042-acf15be6ba74.roa (raw, json)
Hash identifier: 8nfSMJMqxt9IV2p0p0NXfLdxTMAK5vLn69VFgzSj0VY=
Subject key identifier: 3B:C2:B0:70:98:5D:CD:CE:69:5A:DE:91:9B:CA:E4:C6:1B:E1:6A:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665B699198
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c969a0fc-9ef1-3fe0-a042-acf15be6ba74.roa
Signing time: Wed 10 Oct 2018 00:38:57 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=67a08b0e-4c16-43c9-98cd-d3f18d1f9b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:79:f6:a8:c3:ed:5e:f3:32:a8:d2:46:68:
df:35:53:32:92:e3:de:9b:20:4c:79:76:31:ba:c4:
41:33:97:bd:c4:68:0c:7b:94:c3:89:11:80:bd:57:
b7:78:04:4a:87:db:c4:26:63:41:3d:4c:5f:01:fc:
a5:ab:2b:e7:70:74:bb:b5:c2:a7:33:40:d6:b1:ff:
c2:35:54:fa:85:84:7f:b7:df:8d:96:cf:d9:f9:ef:
0d:13:fe:02:86:8c:16:45:bc:3e:11:ca:68:4c:2c:
b8:a3:70:48:70:80:78:45:b5:34:14:44:84:f5:cf:
b0:fe:6a:34:e1:08:27:ca:af:3b:94:52:02:58:73:
a9:c5:b4:ad:4f:f9:da:10:78:22:45:04:d2:ae:9c:
bc:c4:a1:4d:d4:89:b2:15:b9:7c:ce:20:19:49:b3:
c8:db:72:0f:81:12:ac:a9:1f:96:bc:a6:a0:25:2c:
dc:c9:27:b9:15:52:00:85:b8:f5:43:f6:73:78:06:
d0:e5:ea:76:ba:3a:02:96:d4:03:50:24:16:1b:7b:
c2:02:04:32:96:0b:fb:1b:ae:10:d9:b9:9e:e0:f0:
25:c6:06:e8:0a:cb:71:0e:a3:8f:a6:56:4c:4a:44:
3f:44:98:3e:06:96:6d:fa:6b:41:79:9e:42:ff:f9:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:B0:70:98:5D:CD:CE:69:5A:DE:91:9B:CA:E4:C6:1B:E1:6A:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c969a0fc-9ef1-3fe0-a042-acf15be6ba74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:6d:09:ba:6e:1b:d0:d6:00:99:fe:a9:06:7f:6c:43:9b:4f:
8a:5d:4d:84:3f:f1:01:0e:f2:6f:12:a9:15:7e:e3:9a:75:00:
83:2e:e2:37:26:49:7b:b5:7d:79:9f:f6:cd:4a:db:5e:f8:8f:
15:52:ad:5f:7a:79:e4:0c:db:a3:aa:e2:a8:ce:94:93:20:27:
ae:98:d3:9c:41:7e:ca:18:35:82:fb:7e:cc:48:ab:71:0c:1a:
b1:01:46:67:d4:c5:0b:a0:1f:61:5a:50:a3:9e:34:65:22:b7:
f7:31:24:58:2e:b0:e7:2e:7c:25:49:ed:90:8e:aa:b8:59:03:
2f:2e:7f:10:0e:c1:d1:12:44:56:33:56:0a:f6:8b:fb:70:49:
ed:00:5e:df:57:be:91:75:0b:4e:f7:38:90:2c:8c:56:02:0d:
6e:90:df:1c:08:20:04:b1:c8:34:30:57:e9:1a:12:de:ec:61:
64:42:0d:77:97:2e:b1:33:96:a9:0c:6e:71:57:d2:6f:fb:d7:
55:1c:4b:a3:e9:62:d2:31:3e:8f:bd:29:a1:90:55:54:d1:60:
fe:91:41:7a:12:24:8d:26:ca:5c:5a:c3:b0:f9:97:7a:9d:18:
bd:79:8f:a5:c1:4b:00:74:b7:d3:f9:c5:02:20:d1:93:ef:94:
1d:ac:db:75
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZltpkZgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDY3
YTA4YjBlLTRjMTYtNDNjOS05OGNkLWQzZjE4ZDFmOWI3ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALxrefaow+1e8zKo0kZo3zVTMpLj3psgTHl2MbrE
QTOXvcRoDHuUw4kRgL1Xt3gESofbxCZjQT1MXwH8pasr53B0u7XCpzNA1rH/wjVU
+oWEf7ffjZbP2fnvDRP+AoaMFkW8PhHKaEwsuKNwSHCAeEW1NBREhPXPsP5qNOEI
J8qvO5RSAlhzqcW0rU/52hB4IkUE0q6cvMShTdSJshW5fM4gGUmzyNtyD4ESrKkf
lrymoCUs3MknuRVSAIW49UP2c3gG0OXqdro6ApbUA1AkFht7wgIEMpYL+xuuENm5
nuDwJcYG6ArLcQ6jj6ZWTEpEP0SYPgaWbfprQXmeQv/5wR0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ7wrBwmF3Nzmla3pGbyuTGG+FqnDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2M5NjlhMGZjLTllZjEtM2Zl
MC1hMDQyLWFjZjE1YmU2YmE3NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADbn6DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEARW0Jum4b0NYAmf6pBn9sQ5tPil1NhD/xAQ7ybxKpFX7jmnUAgy7iNyZJe7V9
eZ/2zUrbXviPFVKtX3p55Azbo6riqM6UkyAnrpjTnEF+yhg1gvt+zEircQwasQFG
Z9TFC6AfYVpQo540ZSK39zEkWC6w5y58JUntkI6quFkDLy5/EA7B0RJEVjNWCvaL
+3BJ7QBe31e+kXULTvc4kCyMVgINbpDfHAggBLHINDBX6RoS3uxhZEINd5cusTOW
qQxucVfSb/vXVRxLo+li0jE+j70poZBVVNFg/pFBehIkjSbKXFrDsPmXep0YvXmP
pcFLAHS30/nFAiDRk++UHazbdQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:23:22 2025 by rpki-client