Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bf28f9-f8a7-3cd2-a68d-08558b2491a8.roa
File: e3bf28f9-f8a7-3cd2-a68d-08558b2491a8.roa (raw, json)
Hash identifier: VHJqD/pnnHkefKeGhWzChTEVljstV9EPYm3qe88PWNM=
Subject key identifier: 14:F3:0C:B2:FE:6C:4A:1A:AD:AB:77:27:99:26:C4:84:89:DF:74:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C2EC295
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bf28f9-f8a7-3cd2-a68d-08558b2491a8.roa
Signing time: Wed 10 Oct 2018 04:14:20 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=443fec66-384a-4d99-b099-1548f1ee702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:1e:b2:36:31:4d:b8:bb:87:68:69:d1:7e:
e8:fb:25:3d:51:e9:fb:21:c0:78:f8:3c:ce:f6:1b:
b8:a5:5a:e6:e3:e4:e9:a1:b8:75:64:48:ae:e2:f4:
0d:32:12:f9:0f:c5:dc:9c:32:bf:8b:5c:47:d1:7d:
46:19:a2:0e:0f:2d:79:6c:9f:39:ce:bb:e9:66:09:
2b:cf:72:4d:6f:eb:84:4d:16:d5:a7:0e:45:2e:b0:
94:bc:a6:02:cd:69:bf:04:9d:dc:48:db:09:fe:e9:
81:85:b2:b7:f0:61:1b:3f:9c:06:2c:06:c2:ee:32:
9e:5b:76:15:37:c8:64:8a:d0:cc:19:03:c3:05:ed:
b1:8a:23:98:91:85:72:e1:01:f4:df:3f:2f:eb:33:
55:17:0e:a0:00:2f:90:f8:f7:ee:d6:c1:48:43:dd:
e6:3c:f5:b4:d8:c0:7e:80:78:2d:0d:a7:3b:0a:f5:
c6:74:05:87:7b:52:43:49:2d:fd:04:c6:ed:9c:bf:
db:4f:ea:cc:96:df:89:03:e9:8e:ea:16:3c:f5:fb:
7d:dc:12:ed:9c:b9:de:ff:a4:31:d5:be:14:cc:41:
0f:7e:73:be:b0:19:3d:f5:98:9c:1d:20:ca:31:74:
e0:2d:5e:97:ed:70:d1:74:b8:19:37:64:82:77:08:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:0C:B2:FE:6C:4A:1A:AD:AB:77:27:99:26:C4:84:89:DF:74:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bf28f9-f8a7-3cd2-a68d-08558b2491a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:09:91:e4:fb:6b:0c:8f:cc:2b:c8:67:76:39:29:42:49:c5:
3c:00:ea:00:c5:c3:72:97:38:52:8a:a6:08:21:a6:1e:00:b3:
ff:3c:50:df:54:bf:98:31:36:2d:69:5a:0e:20:d7:b9:37:35:
55:17:80:ff:7a:7f:b6:46:c4:0f:ec:ed:ae:b2:a0:55:ca:c4:
c7:74:9e:c7:db:8c:20:47:c5:df:b4:e3:ee:06:33:8b:2a:23:
18:29:e9:2b:5b:49:dc:ca:b3:f0:05:e2:18:7b:33:cc:b0:c0:
aa:57:0b:83:44:25:da:9a:64:4d:48:df:de:3e:ad:26:9d:fb:
9b:34:69:10:b6:63:2f:1b:21:df:a3:74:0d:3a:2d:66:db:8e:
5b:fc:2f:7b:de:27:1e:3b:3d:7f:23:a4:b7:75:d5:73:53:03:
49:d8:67:80:37:9a:4c:f8:b5:08:6f:25:d7:c0:52:d8:77:f5:
e6:d7:ff:c0:9b:8f:2b:da:61:2b:aa:99:47:59:63:71:00:c4:
4e:46:3e:c2:29:84:19:67:b8:4a:62:1d:36:9b:a3:a9:71:be:
94:4c:9f:ef:ed:98:cc:da:6c:3d:65:f1:ee:0a:fc:7a:c9:86:
0e:44:25:6b:99:52:b3:2a:51:35:c0:26:4a:8a:9e:b1:b9:1e:
d7:ab:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:11 2025 by rpki-client