Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0abbf15-81a8-3c22-af92-7b6f2c9d6754.roa
File: f0abbf15-81a8-3c22-af92-7b6f2c9d6754.roa (raw, json)
Hash identifier: 2omK4XryEld39xOGuZQlJX6JaF7SPTmHOw9dCHy4Vmg=
Subject key identifier: BB:CC:76:CB:5B:5B:36:92:A5:82:76:82:DB:B0:C0:55:67:B3:49:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1669631D32D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0abbf15-81a8-3c22-af92-7b6f2c9d6754.roa
Signing time: Sun 21 Oct 2018 10:35:39 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.94.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:d3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=68eb15c3-c6d5-428d-a9b9-b90ffba5e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:af:c4:5c:a6:6a:6c:5d:9d:a0:6e:fc:9d:
13:6f:dd:9c:86:4d:e7:a8:8d:18:be:2e:5c:b2:68:
c9:36:12:cf:e6:ed:5a:3d:b8:57:49:3f:50:33:04:
23:91:0b:a2:2d:c1:77:b1:b0:f5:06:64:fe:9b:f3:
a0:bf:b4:af:0f:26:4f:e7:99:1a:50:f1:9a:30:a0:
87:ab:54:de:6e:fe:b6:3c:47:08:b5:8f:5f:4e:44:
5c:1c:e9:ad:bd:5d:fe:49:fc:76:2e:61:9a:9c:2b:
9f:1e:9e:cf:a9:40:c5:31:fe:15:90:9a:1c:df:92:
d0:8d:ba:61:f9:ee:4b:4d:33:de:ea:5f:9b:e8:17:
57:b7:09:86:00:be:45:38:b1:0f:6d:4b:ca:5d:27:
99:22:35:12:c1:dd:30:48:db:03:d4:19:5a:2a:88:
09:9c:c3:51:a1:a2:6b:93:d4:ed:6a:0d:27:57:aa:
90:5b:dd:54:a8:59:ef:c4:4a:ae:b7:c2:d8:ca:a9:
bf:a4:2a:92:db:12:06:0a:40:61:22:52:f7:c6:d2:
a5:1e:fe:0f:e5:1d:ec:f7:31:21:b6:f5:5f:4e:aa:
f0:48:e2:56:71:2c:4c:46:e9:9d:be:98:18:b3:6d:
a3:de:2f:3d:5a:3f:46:c3:59:b1:f4:a7:68:26:29:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:76:CB:5B:5B:36:92:A5:82:76:82:DB:B0:C0:55:67:B3:49:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0abbf15-81a8-3c22-af92-7b6f2c9d6754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.94.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:25:66:b8:52:1e:fd:83:e7:c4:82:75:89:ff:dc:f0:d1:5a:
d6:86:13:97:f3:0d:72:fa:b5:14:d3:c2:41:91:c8:dd:2c:d6:
0b:75:fb:a4:43:a6:2d:1e:8d:68:c9:af:9d:16:f6:72:a2:6e:
23:cd:a3:06:a5:a1:e5:a1:29:85:97:6e:2a:39:84:ab:3d:46:
54:d9:69:c3:72:62:cf:28:22:a8:f0:60:db:09:ce:e8:b7:16:
e6:ef:68:c2:5e:23:f3:ed:93:59:9d:4e:6d:9a:97:2b:52:b2:
48:2f:15:21:ae:45:9b:1c:48:7f:f1:03:06:22:6c:33:2e:39:
22:4d:9e:55:f0:d0:8a:93:92:e2:8e:0a:d4:4c:49:5f:e2:33:
94:80:a5:c9:e1:df:3d:2b:15:3f:04:52:3a:92:27:73:f1:63:
b0:96:e4:76:ef:b1:ad:f6:ae:32:f0:bf:90:d8:5b:c6:dc:13:
07:6e:bf:be:fb:2f:f2:49:22:1e:e9:0f:ab:9d:83:16:d6:23:
e6:dc:3b:b1:c9:d0:c9:39:d4:21:dc:ee:95:63:3e:e3:30:1b:
46:0c:12:dc:cd:e9:a8:97:99:3d:68:a9:69:f7:c7:5b:a8:c9:
ad:d7:a9:ed:09:77:36:54:3b:0f:28:4c:86:5e:fa:25:a0:65:
a3:1a:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:15:30 2025 by rpki-client