Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee364da7-8f1e-385e-8442-fde28069a13f.roa
File: ee364da7-8f1e-385e-8442-fde28069a13f.roa (raw, json)
Hash identifier: 2BGMc9/XJLrH2RJUEQH5ppkkPJUgzcdFeFILCTFbFno=
Subject key identifier: D2:45:58:ED:6C:0C:B8:C9:46:70:59:23:56:A8:5E:C4:F2:46:07:18
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A80F42
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee364da7-8f1e-385e-8442-fde28069a13f.roa
Signing time: Wed 19 Dec 2018 04:10:07 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a8:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=3f9ef8be-a585-4153-85c2-4b1c50e9c0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:a3:ee:a8:64:09:3c:4a:49:c9:6a:8d:9c:
8f:2e:ef:12:01:2d:21:b6:e4:11:17:9c:6b:44:f5:
64:b9:1f:7c:98:02:a8:d2:76:d5:cf:5a:1a:b1:38:
96:0a:da:68:7d:64:ac:dc:ed:e0:6a:6d:b4:8a:78:
9f:c1:30:3f:e0:55:60:26:9c:e0:97:6b:e4:9c:4e:
56:f5:b7:60:cd:a3:99:e3:83:65:46:56:e1:2e:98:
67:ea:be:7d:d3:b6:76:b4:2f:d1:54:84:ac:13:30:
16:13:d7:18:b0:b4:a6:0d:d0:62:55:20:11:da:e2:
cb:bd:78:83:71:a5:79:94:2b:5f:80:c6:e0:c5:1f:
1e:26:79:c7:d3:0e:88:a2:dd:35:b6:6f:8e:5a:67:
90:ee:41:b6:15:e9:3e:c4:69:6e:ce:75:a5:3f:1d:
1b:a2:e3:91:0e:13:58:f3:54:e4:8f:fb:36:fc:5b:
e5:89:d4:16:4b:08:f8:84:66:57:60:c6:8a:0a:c7:
d9:78:73:bd:dd:93:c3:5b:3e:aa:e1:ba:0d:18:95:
ad:58:24:bc:bc:b8:2d:de:19:1f:fa:76:74:1a:89:
04:4c:77:20:51:db:00:4b:22:b2:90:94:c8:9c:74:
bc:19:2d:52:47:1f:be:f7:2b:8a:b4:d9:e8:45:97:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:58:ED:6C:0C:B8:C9:46:70:59:23:56:A8:5E:C4:F2:46:07:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee364da7-8f1e-385e-8442-fde28069a13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:2c:04:42:05:44:35:1f:b1:78:93:86:7f:ab:71:f5:ce:82:
52:2f:97:e7:2b:50:af:d1:17:d1:2e:71:6d:12:86:77:85:7b:
ee:15:88:49:5b:3d:0f:b7:50:61:59:3b:11:26:21:67:8b:a7:
08:ed:44:b2:96:69:bb:24:d4:82:23:6e:18:4d:ac:21:78:e5:
7b:ce:04:aa:90:bc:51:3b:d1:4e:32:64:96:0d:d0:ee:af:7c:
df:9c:c6:3d:85:0e:22:55:d3:6b:52:51:01:cb:32:9e:a3:35:
89:71:7e:51:ce:7f:66:82:8e:bd:79:0a:f7:9d:1a:bd:6c:9f:
a3:4d:4a:ff:91:3d:4f:3b:ca:1c:f7:4e:f4:37:74:64:7f:b6:
dd:8b:e1:8c:29:61:40:a0:ad:f7:54:12:ed:1e:78:f7:1e:d5:
a0:08:55:a2:7c:f0:d7:80:5b:2d:2b:fb:a2:7a:e7:8d:2d:01:
97:a7:7d:fc:89:33:09:dc:e9:f3:ac:5e:6e:d0:d5:59:a8:b7:
08:37:80:8a:93:a6:fc:80:49:5f:96:47:ce:44:38:74:6d:31:
30:bd:ae:55:30:e8:5f:eb:4c:35:d8:98:bb:d7:3c:0d:6c:82:
2e:91:b7:04:56:03:f8:41:f0:fb:9b:ce:df:70:3e:b0:ae:d1:
49:fb:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:49 2025 by rpki-client