Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3596073-c8d5-3bdd-a2df-2940459a0298.roa
File: f3596073-c8d5-3bdd-a2df-2940459a0298.roa (raw, json)
Hash identifier: NgZH37QIbj5Gjx3jBGTQeMubf1mD1J3USebTCVOLXfU=
Subject key identifier: C8:9A:DB:18:7C:9D:FF:2F:AB:DF:51:A3:75:AE:E7:C2:BC:96:11:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC167C4A7C1CA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3596073-c8d5-3bdd-a2df-2940459a0298.roa
Signing time: Wed 19 Dec 2018 04:09:47 +0000
ROA not before: Wed 19 Dec 2018 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.231.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 05:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=a8a6f2c1-b232-4e47-82b2-33a35079b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:fa:aa:5c:94:c0:d2:a9:3d:70:8a:1c:1d:
ca:2e:ff:44:7e:b1:d1:2d:ad:2d:06:3d:0d:1b:1e:
76:c0:ec:e0:95:51:8e:e0:36:de:e7:e1:d7:92:11:
cb:da:88:09:b4:b7:18:13:01:b3:26:40:e2:45:27:
d9:8d:e7:73:f2:bb:68:ed:3c:12:93:f5:29:f0:49:
31:7b:e7:3f:c4:b4:20:eb:11:77:aa:bc:9d:dd:0f:
ef:12:02:a8:44:a7:e1:6e:8d:07:5c:b1:43:af:48:
6b:10:28:8b:fd:32:9e:19:ad:d3:3d:14:5f:0e:f0:
29:f1:90:06:80:45:31:70:4a:c4:89:33:8f:fa:36:
9c:4c:fe:5c:80:24:04:6f:29:09:b1:bf:d7:2a:c3:
da:55:09:36:0c:57:86:fc:5e:5f:b8:01:9e:25:f4:
48:70:dd:34:ba:49:fb:e2:c9:e2:fe:f5:6c:8b:91:
e5:f5:31:63:02:d7:dc:01:a4:6a:59:73:5c:3d:e5:
63:f7:ea:f7:68:90:23:1c:a0:fa:b8:93:36:9c:a7:
26:d1:e1:b0:03:f6:32:0a:70:48:cc:27:30:f9:c6:
7a:01:2c:06:56:56:98:99:43:50:c4:6c:8e:bb:7b:
60:2c:09:2d:a7:a3:ad:9b:f5:39:24:c4:21:2b:71:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:DB:18:7C:9D:FF:2F:AB:DF:51:A3:75:AE:E7:C2:BC:96:11:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3596073-c8d5-3bdd-a2df-2940459a0298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.231.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:af:38:e0:32:cd:1c:12:a7:62:46:eb:3d:9d:dd:7c:62:ef:
d0:d6:35:66:b8:3d:53:fd:de:4a:68:71:a6:c4:95:73:2c:1b:
7f:32:0d:f5:c7:83:f5:7d:78:eb:f8:2d:f4:7e:69:66:8b:30:
e3:75:82:51:7e:ff:f5:3d:ce:38:2b:1c:19:14:3a:35:d1:75:
bf:09:76:64:54:56:79:bf:f9:65:c6:93:45:98:bc:0b:15:ce:
98:b2:88:ca:07:97:c2:60:b2:16:dd:c6:38:12:80:ad:f3:bc:
73:ee:de:2d:0c:e9:c2:4c:18:64:6e:ff:2f:d2:06:e9:e0:7a:
48:77:65:05:06:9c:d8:c3:e7:89:1b:2b:05:e5:8e:2e:6f:cd:
7c:86:3a:bb:f6:12:0a:17:c0:f1:95:a3:7b:95:73:97:29:d2:
91:e6:c5:a0:40:3e:cc:87:fc:e8:a2:eb:6b:04:06:ca:5c:9c:
26:d4:54:6b:81:dc:b0:e1:29:d1:a7:c6:c6:04:c6:f2:39:2a:
af:83:a2:a1:20:78:1e:4a:da:8e:3f:da:f8:21:53:1e:31:af:
81:63:c5:c1:48:e0:e8:91:87:77:e5:36:2c:5f:47:fc:d9:a2:
49:f2:ae:b7:ad:1b:46:2c:f5:b5:af:c6:ba:99:a3:98:24:08:
8c:6e:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:38:46 2025 by rpki-client