Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf898c5a-2387-3a60-8950-aaf204f226fb.roa
File: cf898c5a-2387-3a60-8950-aaf204f226fb.roa (raw, json)
Hash identifier: L/i8mwjDBNqj1GjJVqO03XBLqlTgdqhziyaZc+CY4Ts=
Subject key identifier: 18:D1:89:A9:B8:E5:88:83:45:57:78:C8:F8:82:40:47:5F:ED:E9:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC166960D7025
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf898c5a-2387-3a60-8950-aaf204f226fb.roa
Signing time: Sun 21 Oct 2018 09:55:55 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:0d:70:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=7d32cfb0-ad8b-4f98-9ae9-5594fe14959b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:ce:1a:34:a5:dd:f4:03:92:a1:36:5c:99:
bd:c3:d7:1e:b6:8e:8e:61:80:f4:7f:a9:96:0f:22:
f2:d8:68:77:d7:15:54:93:50:70:bd:14:a0:c9:17:
02:d5:40:aa:a8:3d:90:03:16:64:91:ba:e5:6b:31:
2c:8d:99:4f:73:b0:e4:7e:52:b8:1d:37:01:4f:d6:
7c:7a:e3:73:c9:d3:38:fe:dd:c9:ba:cc:56:5a:e2:
bd:18:b0:c4:e7:6a:14:e4:36:4f:db:30:a1:7c:a9:
5f:62:9a:c7:49:36:6e:c9:8a:8e:ca:11:9f:b5:c4:
d5:c9:63:57:c2:98:c4:f8:fd:13:18:ad:2a:1e:e5:
de:e7:6a:69:bb:67:e3:f4:e1:f9:d9:64:52:b2:32:
80:36:e7:05:33:ca:07:57:e5:e3:e3:7f:e8:c7:3c:
5b:4f:94:0b:0e:b2:ca:e5:77:81:87:c3:d8:24:b2:
ff:fa:f5:8b:65:5b:ea:e1:04:fc:d7:70:61:d7:eb:
2c:27:52:76:02:56:df:cd:5a:af:3a:50:72:62:4c:
fc:ca:1d:f4:d6:e0:3f:8f:64:1d:0e:67:5a:a6:75:
7f:7e:f8:50:e5:ea:6b:88:cc:1c:5e:df:73:dc:38:
d8:22:17:69:83:72:46:d2:39:dd:be:1e:8a:33:a2:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:89:A9:B8:E5:88:83:45:57:78:C8:F8:82:40:47:5F:ED:E9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf898c5a-2387-3a60-8950-aaf204f226fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:98:6f:11:c7:e8:89:e7:19:14:ab:c9:4d:ea:27:86:12:ec:
88:89:64:52:70:f7:ee:3f:1c:6f:b4:bc:c0:10:10:22:29:b8:
cb:c4:05:c6:e7:7b:81:e5:15:de:b0:df:15:48:f2:1f:34:e1:
c6:8b:48:2b:f6:70:9b:e8:93:4a:4d:9a:58:8f:b0:23:14:e3:
33:42:bf:0a:64:71:aa:db:0b:05:a9:94:aa:7e:49:f8:81:fd:
fd:41:e1:50:fa:e0:1c:93:9a:8b:8b:cd:4a:df:0a:8b:50:f4:
c9:a6:69:71:67:61:0f:4e:9e:04:cd:0d:bd:2f:9b:ef:99:3d:
2a:48:de:54:6e:5a:9c:b5:64:c1:a8:2d:d9:28:55:33:d8:ab:
76:ae:20:20:81:34:3f:af:fa:ea:17:d4:7b:6a:50:70:05:53:
35:11:88:75:34:c8:d6:92:42:b0:4f:6b:81:e8:bd:45:9f:25:
6b:49:90:82:b2:dc:20:15:d1:fc:96:84:a5:9e:b1:ab:7c:5b:
00:8e:a4:35:23:d6:07:61:6c:50:bc:9f:4f:b6:0e:5f:5d:14:
78:03:61:fd:ac:87:c8:c1:10:e7:f1:f3:33:0c:d2:e1:7b:e3:
2e:76:74:5f:57:0e:ca:12:27:4a:2b:6f:6a:59:17:de:a7:e7:
7e:41:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:43:17 2025 by rpki-client