Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf8327d-cdf5-3786-9db7-0ff1c704576d.roa
File: ebf8327d-cdf5-3786-9db7-0ff1c704576d.roa (raw, json)
Hash identifier: Y7G9Kj+eC24HPWsAEHa97eRloX6kkV4adxvREEe9ByU=
Subject key identifier: 8C:C6:9E:DF:6D:48:A2:AC:56:22:10:39:3E:EF:E3:E1:38:41:2D:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16693C72F57
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf8327d-cdf5-3786-9db7-0ff1c704576d.roa
Signing time: Sat 20 Oct 2018 23:19:56 +0000
ROA not before: Sat 20 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:2f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=7f5803c5-0c4c-41e7-abcc-2ea2096b2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:65:2d:1a:54:2f:a8:0d:1d:52:d2:60:a5:
9e:db:77:04:b1:9b:31:80:56:40:99:1c:ab:ec:3c:
62:e9:5f:ed:e0:20:5c:09:16:7e:50:2a:4b:6d:0c:
a0:1b:28:0f:76:ce:d7:e8:5c:a0:cf:42:e1:6a:98:
a5:46:f9:da:48:ce:e7:77:d2:6e:48:78:dc:da:a8:
af:44:32:f5:ab:ef:9b:28:e2:f6:41:8d:a7:82:81:
a0:df:16:75:86:02:8d:f0:26:71:8c:eb:94:8d:84:
7a:eb:d3:44:f4:13:52:f1:d9:6d:e4:49:30:72:23:
c3:7b:0c:69:90:6a:b3:88:ce:25:60:e0:36:ec:c6:
69:94:2a:e8:73:59:b8:62:dd:60:e3:6b:2a:e9:85:
2c:c5:7d:5b:21:28:62:10:c1:fa:50:42:4e:f5:c0:
a2:83:9a:6e:a9:6f:fe:ac:ca:97:0c:2e:ab:81:9b:
e6:da:cf:5c:e1:5b:2c:f7:e9:6a:47:72:e6:bb:75:
b4:d3:8c:e6:68:e5:b3:6c:76:82:55:45:28:8c:9b:
8e:48:1c:5c:8d:99:31:1e:16:2d:77:72:e5:7c:12:
e7:a1:ca:46:a7:53:2a:bd:68:0d:da:58:4a:7d:6c:
f4:2d:88:f4:ee:7f:b6:14:e6:84:e7:56:53:76:46:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:9E:DF:6D:48:A2:AC:56:22:10:39:3E:EF:E3:E1:38:41:2D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf8327d-cdf5-3786-9db7-0ff1c704576d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c8:c9:fb:d7:c9:8b:6c:b1:21:d8:07:02:a0:06:f0:24:fe:
9e:4d:30:da:74:df:ab:0d:54:b4:80:88:61:f2:34:6a:27:35:
a6:e3:c8:ec:70:1c:6b:b8:dd:93:c7:28:1a:8e:22:84:30:c0:
f4:8c:12:c5:a3:b7:11:61:aa:39:22:2f:3d:ac:2b:eb:7c:27:
dc:46:41:c8:68:26:fb:1d:46:65:96:02:f6:18:f0:60:5f:cb:
9e:38:23:23:43:5a:b7:2c:db:4e:0d:ca:ef:21:e0:42:90:e3:
12:1d:ad:74:3b:8b:c8:18:5e:48:81:17:f8:f0:f2:06:37:0b:
49:14:ae:16:52:e5:da:e6:1a:d4:68:ed:e9:1c:f8:d3:e1:19:
82:b0:06:e2:de:fd:82:58:74:c5:f0:5c:50:77:27:36:50:38:
5b:a9:96:58:8b:ca:3c:4d:fc:67:a3:45:af:42:0d:e0:d1:80:
01:9e:c5:97:9c:5c:98:4e:74:61:40:71:12:1d:b2:7e:7d:5f:
39:eb:2b:18:39:d8:b6:ce:11:74:41:dc:d0:be:01:fd:ba:47:
80:2b:eb:e8:57:e6:f0:3f:3c:b8:d5:63:35:69:3f:84:48:d7:
2b:e9:93:be:af:d4:ce:53:34:9b:c2:15:13:fa:cc:dc:f4:c0:
1d:53:01:d2
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpPHL1cwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDdm
NTgwM2M1LTBjNGMtNDFlNy1hYmNjLTJlYTIwOTZiMmQzNzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANJOZS0aVC+oDR1S0mClntt3BLGbMYBWQJkcq+w8
Yulf7eAgXAkWflAqS20MoBsoD3bO1+hcoM9C4WqYpUb52kjO53fSbkh43Nqor0Qy
9avvmyji9kGNp4KBoN8WdYYCjfAmcYzrlI2EeuvTRPQTUvHZbeRJMHIjw3sMaZBq
s4jOJWDgNuzGaZQq6HNZuGLdYONrKumFLMV9WyEoYhDB+lBCTvXAooOabqlv/qzK
lwwuq4Gb5trPXOFbLPfpakdy5rt1tNOM5mjls2x2glVFKIybjkgcXI2ZMR4WLXdy
5XwS56HKRqdTKr1oDdpYSn1s9C2I9O5/thTmhOdWU3ZG0DsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSMxp7fbUiirFYiEDk+7+PhOEEt9zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2ViZjgzMjdkLWNkZjUtMzc4
Ni05ZGI3LTBmZjFjNzA0NTc2ZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDReYDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAd8jJ+9fJi2yxIdgHAqAG8CT+nk0w2nTfqw1UtICIYfI0aic1puPI7HAca7jd
k8coGo4ihDDA9IwSxaO3EWGqOSIvPawr63wn3EZByGgm+x1GZZYC9hjwYF/Lnjgj
I0NatyzbTg3K7yHgQpDjEh2tdDuLyBheSIEX+PDyBjcLSRSuFlLl2uYa1Gjt6Rz4
0+EZgrAG4t79glh0xfBcUHcnNlA4W6mWWIvKPE38Z6NFr0IN4NGAAZ7Fl5xcmE50
YUBxEh2yfn1fOesrGDnYts4RdEHc0L4B/bpHgCvr6Ffm8D88uNVjNWk/hEjXK+mT
vq/UzlM0m8IVE/rM3PTAHVMB0g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:45 2025 by rpki-client