Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d64eae92-61ad-3c70-9967-12db2d1652c8.roa
File: d64eae92-61ad-3c70-9967-12db2d1652c8.roa (raw, json)
Hash identifier: wpZsF7zxNZu1FaX7jiWIj7UDh4/DbuZYzUh4ZPScquQ=
Subject key identifier: 86:88:F9:1B:3B:2D:64:57:13:90:36:A8:A2:FD:F3:61:9B:F7:6D:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C2ECA3D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d64eae92-61ad-3c70-9967-12db2d1652c8.roa
Signing time: Wed 10 Oct 2018 04:14:22 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d4085b62-c0a9-405d-822f-08fe44398f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:bd:f3:16:33:f8:bf:37:9a:a3:be:1a:b7:
32:7d:69:af:e1:ea:73:81:01:f6:e4:98:00:32:19:
70:30:de:e5:8a:c2:1a:e2:5a:5e:79:ae:9a:04:00:
65:e4:67:df:dd:75:97:95:d9:54:7e:fc:5d:46:d7:
71:ec:b0:a8:c8:b4:b1:e9:11:73:bc:98:a6:bd:1c:
44:59:0a:ed:23:a0:01:3b:d6:43:ce:b6:ca:85:8d:
f9:6b:9f:69:22:63:b3:64:f6:96:48:c0:8c:b4:7c:
2a:25:40:4c:8e:78:87:ad:ae:e6:9c:26:ac:77:3c:
ac:37:87:85:55:92:ab:69:2b:ea:55:fc:a2:12:96:
ca:c6:29:0b:ae:d1:20:0a:17:03:64:be:23:d3:55:
8c:26:22:de:6a:d2:01:3e:5c:3d:55:c1:9c:82:ea:
08:85:78:b7:7f:10:12:06:e0:df:e3:f6:fc:9c:b8:
a4:70:88:e9:92:ca:e2:8b:55:82:ac:8d:2c:59:93:
ae:62:c2:9b:4c:1d:82:d5:38:13:d4:58:6b:b1:1a:
6c:50:76:eb:53:bc:88:e3:69:9d:83:4e:7f:9c:9e:
62:76:f8:0f:97:fc:f3:66:12:32:ef:fd:ed:ef:10:
38:3e:e9:08:df:68:6b:f5:9a:da:40:9a:70:8d:09:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:88:F9:1B:3B:2D:64:57:13:90:36:A8:A2:FD:F3:61:9B:F7:6D:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d64eae92-61ad-3c70-9967-12db2d1652c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a2:4e:d0:41:4e:ca:94:c6:2d:9a:d9:9a:f7:76:09:cb:ea:
1d:76:16:e1:a6:b0:12:f6:45:57:d2:52:40:ab:62:7e:2b:c1:
18:7a:96:4f:a6:5b:a7:ed:1e:5f:2d:b0:b1:62:df:91:ac:9b:
77:ec:fb:e1:d9:60:41:6a:27:9e:51:78:71:b1:aa:b8:1e:e2:
7d:0f:1f:45:26:52:18:0e:5f:4a:fd:d9:43:2b:6d:d8:07:25:
27:d7:38:87:8d:fa:12:5d:24:3c:f9:d1:39:51:c1:ab:34:3b:
4e:b0:5f:1d:c4:86:1f:ac:97:4d:ed:44:ba:3f:3d:2f:38:94:
36:3f:f1:8f:bf:69:8e:2a:a4:16:a5:9c:db:f1:02:f3:54:bc:
5a:f8:bf:8d:33:75:77:64:ba:21:ee:0f:af:b5:2a:50:90:1a:
68:9c:76:59:9b:28:e1:a0:f4:8a:25:84:e8:66:49:a2:4c:17:
8d:7b:39:0f:7c:b0:6b:1a:11:0a:ce:a6:b1:fc:13:49:86:10:
46:6c:73:6d:95:ba:55:56:8c:a1:7d:53:88:bf:98:3f:bc:d0:
90:a3:4a:c8:8d:b2:40:d7:61:cb:9e:49:51:c6:ab:b3:cf:6c:
68:77:c5:4a:31:72:e4:4b:2c:cf:21:65:74:91:16:bc:5f:72:
de:b2:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:25 2025 by rpki-client