Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceed6dcb-bcbd-3e93-9f3c-5e6a01bf26cb.roa
File: ceed6dcb-bcbd-3e93-9f3c-5e6a01bf26cb.roa (raw, json)
Hash identifier: dle5QnxjOYGJC4hK0BzVnnXGmRlpTWy5m3LoZq2mp7I=
Subject key identifier: 8B:13:4D:3F:17:67:27:60:3F:69:21:D5:91:3A:3D:E2:D1:19:27:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C076E10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceed6dcb-bcbd-3e93-9f3c-5e6a01bf26cb.roa
Signing time: Wed 10 Oct 2018 03:31:22 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=8130fb58-75e0-4f67-8247-d1b9049ef8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:8c:be:28:8c:97:e9:f5:74:45:d9:f0:ca:
8d:96:7e:52:f1:f0:3b:00:e2:71:de:06:04:fb:dc:
58:c5:7b:cc:6d:c7:c3:8d:82:77:1d:f2:b7:d7:ee:
a2:44:62:26:52:c6:e4:09:e1:5c:66:05:3d:76:e6:
e1:10:c9:66:5d:70:bd:4a:42:8a:ee:8a:fc:08:36:
ac:6d:c4:92:82:92:97:bb:13:f9:5b:29:aa:ab:77:
6e:e8:13:71:da:09:92:f0:56:39:da:43:b3:1a:58:
75:f4:b7:6a:5e:c7:f3:ca:1d:a9:f2:12:29:e1:d7:
81:00:1a:ad:86:e9:e5:19:d0:09:78:83:de:74:ca:
d7:7f:16:79:b2:7f:66:6c:4e:7c:67:81:2b:d6:d7:
45:02:ed:fc:04:fa:a5:48:52:d8:8e:76:6f:c4:66:
05:9e:a6:3f:5d:52:ce:63:3f:42:20:67:28:d9:10:
df:ec:94:70:37:fc:88:51:d2:d2:7c:e8:48:91:ca:
93:89:2e:bf:36:ad:f6:01:7c:28:7d:0f:58:50:92:
95:17:8d:38:d2:ca:37:ff:3d:1f:97:a9:bb:4f:48:
7c:1a:1a:9f:47:50:db:a1:59:a5:8f:f3:9b:37:c9:
cc:25:74:28:03:7b:ae:c8:09:80:e5:4b:9a:3c:a1:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:13:4D:3F:17:67:27:60:3F:69:21:D5:91:3A:3D:E2:D1:19:27:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ceed6dcb-bcbd-3e93-9f3c-5e6a01bf26cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:12:be:25:2f:42:ab:9e:83:2d:ed:d9:83:43:fc:0e:53:d4:
66:57:11:6d:7a:0a:c5:83:b7:4b:b9:a7:b3:65:c9:f2:f9:0b:
b2:8b:af:95:33:d4:65:30:93:d2:e0:92:c4:10:b9:1b:63:8f:
9b:5c:70:2c:56:4e:e2:f1:d1:33:33:ec:4a:ae:b2:9e:54:c7:
bf:2b:8b:9a:28:01:32:0f:60:b5:8a:00:36:f7:fb:f6:55:45:
df:bd:43:77:f8:53:eb:f4:c4:b4:64:2d:0b:cf:78:85:02:87:
44:10:bf:59:4e:61:e0:7b:54:e9:d9:7d:d5:ea:48:15:12:c8:
c9:62:f4:e1:33:5f:3b:8e:97:4d:35:b7:cb:40:9a:79:85:16:
c4:8e:27:9d:1f:ed:cb:51:74:39:a5:91:f2:7e:4a:90:43:13:
5c:de:47:61:9c:c8:87:98:81:0e:4f:38:3d:39:2b:90:2c:b0:
87:1e:6e:52:c1:91:9d:1c:aa:61:19:34:6b:d8:2b:08:f0:8d:
2d:8e:1a:f3:7a:91:b5:7b:34:89:8f:1c:6e:0e:c4:0c:01:4e:
75:e5:ff:0f:e8:3d:d9:70:c8:ac:99:83:5e:7b:7b:3d:e8:65:
c9:2c:3d:4b:38:1a:c9:27:12:e3:b0:62:03:44:1b:46:a6:04:
31:9d:94:38
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwHbhAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDgx
MzBmYjU4LTc1ZTAtNGY2Ny04MjQ3LWQxYjkwNDllZjhhYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMc2jL4ojJfp9XRF2fDKjZZ+UvHwOwDicd4GBPvc
WMV7zG3Hw42Cdx3yt9fuokRiJlLG5AnhXGYFPXbm4RDJZl1wvUpCiu6K/Ag2rG3E
koKSl7sT+Vspqqt3bugTcdoJkvBWOdpDsxpYdfS3al7H88odqfISKeHXgQAarYbp
5RnQCXiD3nTK138WebJ/ZmxOfGeBK9bXRQLt/AT6pUhS2I52b8RmBZ6mP11SzmM/
QiBnKNkQ3+yUcDf8iFHS0nzoSJHKk4kuvzat9gF8KH0PWFCSlReNONLKN/89H5ep
u09IfBoan0dQ26FZpY/zmzfJzCV0KAN7rsgJgOVLmjyhJmkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSLE00/F2cnYD9pIdWROj3i0RknPjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2NlZWQ2ZGNiLWJjYmQtM2U5
My05ZjNjLTVlNmEwMWJmMjZjYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRf9zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAaxK+JS9Cq56DLe3Zg0P8DlPUZlcRbXoKxYO3S7mns2XJ8vkLsouvlTPUZTCT
0uCSxBC5G2OPm1xwLFZO4vHRMzPsSq6ynlTHvyuLmigBMg9gtYoANvf79lVF371D
d/hT6/TEtGQtC894hQKHRBC/WU5h4HtU6dl91epIFRLIyWL04TNfO46XTTW3y0Ca
eYUWxI4nnR/ty1F0OaWR8n5KkEMTXN5HYZzIh5iBDk84PTkrkCywhx5uUsGRnRyq
YRk0a9grCPCNLY4a83qRtXs0iY8cbg7EDAFOdeX/D+g92XDIrJmDXnt7PehlySw9
SzgayScS47BiA0QbRqYEMZ2UOA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:37:39 2025 by rpki-client