Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceb2b036-2fbc-370b-8763-47b0b65ff50f.roa
File: ceb2b036-2fbc-370b-8763-47b0b65ff50f.roa (raw, json)
Hash identifier: cKXuIibxaQm5q0+JkLQwOFVL/1FfQuaxnluwanPR3SY=
Subject key identifier: 25:03:84:D0:5F:BE:47:F5:3A:EC:BE:8C:2B:D7:D6:F1:C8:9C:A9:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B525C6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceb2b036-2fbc-370b-8763-47b0b65ff50f.roa
Signing time: Sun 21 Oct 2018 08:19:28 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.239.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=0b0ea5a6-64a6-4179-812f-43e93f5aea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:7b:5c:1d:da:a1:08:5e:6a:9c:97:bd:45:
f9:6d:54:0d:e9:92:2d:47:22:67:eb:fd:95:bd:76:
af:c6:44:63:1f:ee:66:01:19:9f:e7:bf:4d:af:dc:
b9:93:d8:ca:ab:62:a0:2c:3d:25:f9:de:6d:a5:78:
52:d6:1f:1f:67:71:69:f4:eb:1b:ac:df:0c:38:c7:
62:1d:9d:f9:72:ee:0f:44:5d:f9:20:a2:8a:aa:c9:
10:68:90:67:0b:93:2c:8f:71:ce:aa:3e:ca:f4:54:
49:8e:b3:b2:e9:ec:fd:1a:ae:f5:3a:5b:de:e3:86:
c1:54:34:9f:2b:8b:2a:45:af:93:aa:b0:17:ea:28:
62:ff:95:6e:77:22:2a:fd:59:3f:d1:b4:53:4f:ce:
b6:7f:e5:1e:3f:ce:72:42:7d:08:01:32:c0:28:a7:
b7:e4:66:37:b4:5c:ae:f7:1a:2e:a6:f5:a0:2e:ce:
b2:06:89:1a:77:59:7b:23:6a:2d:c8:0e:c5:e9:8f:
6c:93:fd:36:2e:e8:9d:5b:32:2c:22:03:b3:69:53:
1e:4e:fd:74:1e:92:f1:f1:1d:fc:36:be:78:ef:76:
77:4b:a1:e4:26:e9:77:cf:69:7e:e0:01:2f:ec:a0:
2c:9e:ab:5f:a5:e6:82:a9:ad:e7:24:e0:78:c7:2f:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:84:D0:5F:BE:47:F5:3A:EC:BE:8C:2B:D7:D6:F1:C8:9C:A9:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceb2b036-2fbc-370b-8763-47b0b65ff50f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.239.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:e7:c6:87:cb:e8:f3:2a:c4:ce:a7:9b:c0:7c:14:f2:34:33:
b8:e2:a8:b8:5a:84:1e:dd:c0:4c:0f:2c:e9:1f:08:f4:e2:bb:
4e:cf:ca:78:de:3a:87:dd:c9:65:00:de:f1:f0:f0:3c:04:be:
89:56:a5:cd:0d:dc:7c:69:d4:ea:95:78:b6:33:0a:d0:59:ee:
c1:35:06:a0:de:a6:da:a2:85:83:f2:e2:2b:77:29:9d:e9:a4:
27:1b:a6:f1:7e:6f:b3:ab:97:0e:a9:79:51:87:1f:d3:af:0e:
1d:6e:fc:ac:5c:75:10:21:80:c4:80:63:2d:b0:9b:88:a8:92:
96:c1:06:26:33:94:31:31:ea:23:7e:eb:6d:b8:1b:71:10:cd:
1f:bc:b2:b9:6e:c2:6d:91:94:e7:85:fd:4c:50:df:f6:04:63:
df:87:39:c2:72:8d:c1:5e:5f:aa:96:94:d0:d8:3f:e0:4d:4d:
f4:31:ff:44:9b:9a:12:02:a4:35:5c:a0:27:86:43:3e:0c:a8:
ac:1d:43:5a:b5:b0:a5:29:a1:fc:0f:bc:c3:7e:74:8e:37:13:
25:18:83:38:10:26:96:ff:97:a8:e1:6f:8e:60:72:36:37:2b:
0e:35:f3:88:33:20:f6:05:70:89:b4:fe:88:91:c4:03:51:cf:
00:c7:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:25 2025 by rpki-client