Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbaf300d-b1b4-352a-a179-7aba484d42e9.roa
File: cbaf300d-b1b4-352a-a179-7aba484d42e9.roa (raw, json)
Hash identifier: /nu0NkF+5J9AJ9/JgRC8xAV1uzBqVkvud08fb4pYpx4=
Subject key identifier: D2:A1:11:41:6C:4E:13:A0:3F:28:1A:AA:22:75:44:CD:30:DC:B3:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A7B0F3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbaf300d-b1b4-352a-a179-7aba484d42e9.roa
Signing time: Wed 19 Dec 2018 04:09:43 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:b0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=ebf1cfab-46aa-42ea-aabf-5d0aa298b5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:7a:eb:3b:35:04:60:72:9b:61:b3:52:b3:
1c:19:b1:3c:75:53:02:83:93:dd:18:74:67:ea:3a:
18:c6:c4:df:aa:9b:ed:2a:e5:e4:86:a3:e7:1a:61:
3b:43:ed:70:45:30:2e:24:2c:da:0d:78:29:bc:1e:
a5:99:28:b1:ee:aa:ff:ba:66:2f:85:b3:a9:c3:82:
b9:13:ae:6c:6c:e8:61:8f:ca:81:3a:89:b5:9e:3f:
b9:e3:69:47:ce:13:be:2d:f1:28:cd:4c:3e:5c:a9:
e1:33:49:f4:e2:28:3c:43:5b:c6:ae:5f:47:14:09:
ac:da:e5:6a:1a:07:93:f1:46:b3:1d:f0:f1:2f:67:
2f:b2:79:a7:ce:3a:e8:8e:3d:b4:f3:d6:b8:7a:f0:
97:6b:8f:c2:1b:0e:b7:bd:22:ea:78:f3:08:0d:08:
20:3a:6a:41:39:f7:a9:41:51:9e:f0:74:68:22:52:
43:8e:7d:2f:d8:f4:37:da:a7:40:21:93:42:2e:b1:
39:da:59:ab:a4:91:e1:b0:85:30:1f:37:5e:5f:09:
3d:0e:2f:43:57:c8:47:7a:fc:50:23:7d:64:ce:e4:
74:c6:90:11:86:b1:67:74:8b:7b:10:81:1a:5f:98:
29:90:35:58:48:88:af:df:0e:83:01:bd:4d:ff:a7:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:11:41:6C:4E:13:A0:3F:28:1A:AA:22:75:44:CD:30:DC:B3:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbaf300d-b1b4-352a-a179-7aba484d42e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:eb:be:06:bc:09:1a:c7:ad:a3:48:79:62:56:c4:ab:96:81:
15:6b:5b:14:b5:28:17:1e:2e:70:93:36:b8:48:2c:03:a6:47:
8f:da:c3:f5:97:1d:61:25:97:fc:f2:4a:92:f4:b1:3e:b7:88:
b6:3c:36:22:74:52:3e:ee:e4:ea:e5:d0:c5:fa:ac:86:76:22:
c7:59:03:b2:20:6f:3b:39:eb:e8:9e:9a:76:c8:7d:4c:58:35:
ba:07:7f:fa:ea:2a:4f:86:3e:cf:35:f1:61:e9:a7:09:63:63:
33:0b:46:5b:82:45:18:61:f0:ab:4e:be:61:c9:00:70:78:6b:
a7:d5:32:5e:8a:84:bb:27:c3:24:e9:04:48:fe:fb:2f:17:38:
5c:f2:b3:ed:a7:83:8c:a3:40:0a:54:b5:f9:ec:f0:5a:b6:82:
4c:a1:b9:66:95:33:f0:ea:f1:82:59:ed:94:13:25:67:1d:cc:
6b:13:11:92:9d:a3:02:9e:5a:0a:24:fc:5d:0b:1e:fa:87:86:
fc:ee:0a:8d:20:28:61:b3:ea:8b:d7:e7:6e:c1:99:6f:a6:32:
75:bc:2e:c8:24:75:7b:86:a3:a1:9b:a0:b9:36:8a:3e:d8:5e:
2c:d7:01:ee:07:0e:f0:be:6f:64:f4:bc:fb:97:8a:37:17:c3:
e6:2b:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:35 2025 by rpki-client