Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcdcb951-3ee9-32ca-afd5-31f0b5caa02b.roa
File: dcdcb951-3ee9-32ca-afd5-31f0b5caa02b.roa (raw, json)
Hash identifier: nKLUnTXidXguoqc8jXvsbJgBZpkUJcwH4PcJ2+jQ5dQ=
Subject key identifier: D9:51:F8:BB:0A:06:D6:7D:A9:4E:63:2E:14:72:8D:D8:6F:BB:B1:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD4466A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcdcb951-3ee9-32ca-afd5-31f0b5caa02b.roa
Signing time: Wed 10 Oct 2018 07:15:07 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=290d4f25-9244-421d-b2a8-b2bd6873a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:e4:3d:b5:4b:95:f8:c5:46:63:53:ad:1b:
e1:67:23:14:bc:75:6f:21:d0:38:57:4b:5d:04:f5:
01:30:fb:9c:73:53:c5:18:74:1a:92:91:c1:7a:d4:
3e:fe:33:8c:b8:7a:ec:de:a2:06:1a:9c:df:2c:9a:
32:7e:00:8d:a3:41:57:df:ba:50:2a:5f:b0:c1:c2:
37:b0:5b:58:3d:f2:5b:fb:a7:17:54:e9:a0:d2:1e:
c0:a3:2f:13:09:00:d7:5a:9a:c0:ae:70:cf:bb:b9:
c7:90:4c:ba:f0:a3:60:de:36:53:b9:25:ae:80:ae:
d1:40:0f:03:f6:fc:e8:f8:6c:f3:80:a7:5a:9e:a9:
6e:72:36:c7:72:0a:06:f3:19:8b:8e:6c:96:2c:c1:
9c:54:ed:2b:d4:81:0a:1d:d0:b4:d9:e4:fc:53:52:
de:7a:75:1e:b9:04:f4:cd:83:a2:b8:8b:dd:30:ac:
02:12:52:65:f2:45:fc:44:25:dc:5c:68:ec:8c:c8:
8b:c5:6e:80:6c:d9:6b:4b:ce:27:42:38:45:5c:fb:
0f:e3:cc:73:49:f5:61:dd:ea:ed:32:c5:91:19:dd:
97:fb:a0:9b:dc:f7:0a:be:07:b8:16:49:15:26:ac:
7f:95:5f:22:1f:8e:64:00:bb:d8:2e:14:ef:3a:91:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:F8:BB:0A:06:D6:7D:A9:4E:63:2E:14:72:8D:D8:6F:BB:B1:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcdcb951-3ee9-32ca-afd5-31f0b5caa02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:83:bd:b2:44:be:82:0f:bb:f9:7f:23:4f:9b:b5:75:72:47:
fc:5c:1b:50:d0:9b:21:5b:b5:c1:15:8d:87:38:b8:c7:cc:f0:
14:85:c8:35:0b:76:d6:d2:74:a8:72:10:e4:37:80:d0:02:74:
36:93:c3:7a:22:f6:ff:6f:a0:92:da:34:f6:64:0a:9c:8e:47:
04:be:42:ac:0e:3a:91:43:b8:4a:c7:bf:98:78:42:90:44:58:
f6:5b:a6:cc:2c:57:8d:96:10:af:06:ba:74:39:05:58:36:0e:
f9:73:17:7c:f5:9f:76:50:4b:5a:2f:54:66:fa:75:9b:78:0e:
ec:b2:ef:d4:db:c1:43:96:94:8b:b8:46:ac:46:45:d3:18:f1:
b7:b7:d3:3b:fd:60:bd:44:58:2b:69:b2:4d:b0:58:da:63:6f:
b3:42:a5:9f:94:94:c7:a2:31:39:71:11:a1:11:d4:6c:f0:01:
10:da:40:ed:27:6d:02:54:4c:79:fa:84:b0:d1:73:4a:52:07:
f3:35:a3:23:fa:36:43:94:c4:e1:04:0c:f6:4a:35:a0:23:f3:
68:2f:89:8f:1f:70:4c:c3:17:90:e0:dd:fa:4c:31:38:bb:f3:
37:92:40:2b:86:8c:85:df:f8:bf:4a:c3:ed:45:1f:0a:45:0d:
4d:75:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:46 2025 by rpki-client