Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec7e26e8-c6d5-309a-9261-d6d1885d89a9.roa
File: ec7e26e8-c6d5-309a-9261-d6d1885d89a9.roa (raw, json)
Hash identifier: rT9oNIgqIvoJjVAm+sneoPhRwe/1Wt4cT+F0mrCefJM=
Subject key identifier: 4B:0B:DB:3C:FC:44:FE:A5:EF:FB:ED:AA:81:F5:71:4D:EC:EC:65:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B51FF3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec7e26e8-c6d5-309a-9261-d6d1885d89a9.roa
Signing time: Sun 21 Oct 2018 08:19:27 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.238.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=0eb87385-72fe-49d7-a623-6ac4548b80cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:d2:49:b5:71:1a:12:8e:4f:6f:7d:e9:1c:
ae:2d:9c:fd:ae:0b:80:0d:3b:7e:02:fe:51:ab:e2:
43:2b:06:7a:ff:35:bd:16:0d:ea:38:83:cb:93:7e:
8e:7f:59:08:9a:e7:8b:a3:73:c5:8b:03:4a:d4:0c:
b3:ab:df:bb:2c:29:e5:e8:79:d4:93:69:2e:69:f7:
ef:23:13:74:cd:88:b1:29:45:45:f3:82:ac:c4:19:
b1:70:83:80:39:67:51:f0:31:9b:6e:4c:6a:8c:05:
54:22:0a:cc:c1:5e:86:40:10:03:10:6d:ee:ea:c3:
94:45:f3:af:b2:50:17:b1:57:09:ac:f7:4d:5d:81:
9f:61:4b:3e:ef:4b:03:70:e8:b1:88:ba:97:e9:bd:
e6:e2:f9:f4:14:b7:4f:6f:34:1b:71:fb:d0:6f:e6:
f1:39:d3:35:c6:68:ec:58:66:3c:ef:12:f8:7b:29:
6d:07:17:41:3f:3f:40:db:7a:c8:47:9f:41:c6:85:
5d:96:b2:d6:34:bf:ab:bc:d2:bf:4b:ed:10:4a:9e:
9a:82:bc:39:e6:60:e7:69:8d:de:58:0d:2e:db:66:
8b:11:0d:4b:49:0f:dc:dc:42:82:5a:f7:b5:1f:7d:
b2:d9:11:ee:67:0c:8d:d6:fb:ca:9b:3b:e6:1a:91:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:DB:3C:FC:44:FE:A5:EF:FB:ED:AA:81:F5:71:4D:EC:EC:65:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec7e26e8-c6d5-309a-9261-d6d1885d89a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.238.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:10:56:30:b0:df:1d:ff:6c:a6:b2:37:db:7f:c1:62:54:e3:
a9:82:cb:0e:6b:3b:9a:c3:4d:93:fe:51:22:e1:15:6e:05:fd:
06:a0:7c:47:40:e9:82:06:cf:dc:5a:64:83:b1:55:0a:77:23:
f3:6c:55:2b:6b:31:a9:a7:2b:6a:d2:e5:5e:a2:51:35:74:2b:
c9:62:c2:50:37:b1:25:81:36:a8:86:4c:c5:ab:d3:3e:56:5e:
f7:c7:fa:e5:61:04:da:09:92:b0:fa:70:98:19:ac:c7:ac:0c:
37:b0:b1:64:83:18:5d:a5:98:aa:d9:fa:2d:0c:ae:88:00:88:
42:f1:c6:13:8b:85:36:0a:93:25:76:c4:f2:0e:63:74:a1:0d:
65:5d:97:d2:6f:34:3f:9f:4a:32:09:f3:38:61:72:f1:2b:4e:
15:9f:64:5b:48:e8:78:1e:ef:a5:66:5e:61:b3:c8:08:ab:a0:
56:fd:1f:4d:2e:e0:7a:64:1b:36:3e:d1:a1:e0:00:e7:77:3e:
20:43:fa:15:d4:47:af:63:89:d9:21:1f:29:f0:e6:23:bc:02:
15:54:3a:d9:72:e6:df:cc:8d:96:e9:ec:7a:69:24:b7:5b:d5:
e9:90:f9:03:1a:81:b8:fc:31:e6:ce:92:99:da:bd:ad:b1:23:
cf:a7:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:34:54 2025 by rpki-client