Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7466856-d276-331e-9980-2fdedb9b57fb.roa
File: d7466856-d276-331e-9980-2fdedb9b57fb.roa (raw, json)
Hash identifier: PWE/MYC3s/W2Ehs4HYoZdEiEPE9hvc/+LqrB8ozsTg0=
Subject key identifier: EF:7E:B8:7C:34:24:0C:8C:64:61:E5:98:47:7B:AE:99:2F:8B:72:36
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16694462BD1
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7466856-d276-331e-9980-2fdedb9b57fb.roa
Signing time: Sun 21 Oct 2018 01:38:38 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:46:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=ce3694ee-0611-4290-b975-28526d948390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:6a:a4:fe:a6:b4:99:89:71:79:6b:d6:80:
d0:96:2c:1f:e5:12:ef:31:e2:c0:78:4e:f5:ae:6b:
c4:3f:8c:bc:71:86:2e:01:42:cc:53:14:83:5d:cc:
50:02:08:a5:4f:aa:8b:96:60:8c:bb:7d:cd:45:e6:
d8:eb:9a:c4:b0:60:98:7d:b9:45:78:cc:06:78:6d:
64:2f:17:8b:f9:0f:dd:22:72:1e:fd:b9:ba:2b:4e:
45:27:3e:cb:5e:3f:00:02:c5:f3:8f:b8:69:01:2c:
3d:ca:d2:62:df:b9:de:63:5f:3f:8e:95:90:fb:4d:
ed:fa:15:b3:f8:c6:c8:35:d4:44:82:18:68:ad:9a:
6d:ef:48:df:83:55:5a:51:3e:d1:82:6e:92:3c:a7:
f6:04:57:3c:68:31:c5:fd:9c:5f:ff:1e:09:49:81:
55:b7:3e:d4:c0:46:48:9c:1b:77:b8:e8:9e:42:91:
db:4d:5d:ce:97:2f:71:fc:54:7e:4b:98:c8:8a:7c:
03:3b:32:fe:47:8d:0d:77:3f:50:0e:9a:47:87:64:
79:55:40:d9:a1:9a:05:b7:50:fb:4d:82:c9:3f:d9:
bd:76:83:9d:a3:2a:59:25:d0:e8:2a:62:e5:dd:97:
7b:ea:39:ea:c8:91:48:1d:97:d0:9e:c1:8d:00:25:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:B8:7C:34:24:0C:8C:64:61:E5:98:47:7B:AE:99:2F:8B:72:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7466856-d276-331e-9980-2fdedb9b57fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:81:31:41:7e:9b:da:55:bc:99:c7:c8:a0:76:d5:d3:e5:e1:
26:87:b5:44:0d:78:0c:64:a8:a3:3c:4d:8c:6e:99:b7:4d:2d:
f4:5f:6f:b2:22:50:b9:32:04:ac:0c:35:0f:2a:cc:0d:e0:64:
32:1a:07:a0:94:de:e1:44:3a:a7:9b:90:de:20:c3:62:48:6a:
56:cc:e1:dc:d5:b8:95:ca:f7:33:72:1b:66:f4:a6:99:37:44:
b5:07:c0:5b:00:f6:74:7c:7e:0b:f3:ff:15:c0:89:fe:8f:2a:
30:05:f9:46:cb:57:3a:b1:4d:16:08:8a:4d:b6:22:cf:cb:aa:
96:40:fd:c9:0e:b8:f4:6b:0d:7d:73:44:b9:1b:1b:0e:28:2b:
17:83:05:cb:ca:94:ed:ed:7e:7f:33:44:fe:8f:02:df:2e:62:
5f:bf:15:fa:98:c7:37:b1:5b:1b:94:19:b0:bf:48:0b:d2:2f:
a1:5f:0f:1f:8c:94:7b:7e:c2:a9:31:c7:5e:dc:26:73:df:da:
85:58:44:f9:be:f9:97:9f:ef:5e:44:98:be:7c:f5:51:43:98:
22:99:cb:05:6b:2f:1b:40:95:f6:f8:77:18:20:6e:81:2d:5f:
22:6e:62:04:90:8b:e4:95:dc:82:a4:0d:51:a8:5f:16:d3:5e:
94:4d:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:49 2025 by rpki-client