Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6281214-f954-3ee7-8a79-f1be560a525b.roa
File: f6281214-f954-3ee7-8a79-f1be560a525b.roa (raw, json)
Hash identifier: U18Pnj518HU0DPK8A5GxcXD/Isg4sezyfDRr3YZfDVM=
Subject key identifier: 8B:8B:2F:84:3A:89:44:AF:BF:D0:36:FF:EE:5D:87:7C:42:74:F9:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16693C7381C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6281214-f954-3ee7-8a79-f1be560a525b.roa
Signing time: Sat 20 Oct 2018 23:19:58 +0000
ROA not before: Sat 20 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=ac56ac51-339d-4cb7-86b3-d165ce0bef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:08:39:00:3f:e4:14:98:05:a6:a7:6f:a6:
15:cf:ec:a7:37:d5:e5:25:d9:b4:8a:80:70:43:1a:
1a:8b:3e:82:a4:76:2f:d4:c2:ec:16:98:a6:14:bc:
b0:58:d0:7e:7b:21:44:7d:d7:b9:5e:42:8f:4e:b2:
89:24:85:63:d1:7a:2c:56:16:a8:ec:dd:45:ed:10:
7a:a2:92:2a:a3:d9:b1:b0:36:96:5f:c0:18:33:76:
5e:0a:9c:f0:05:2e:4e:bf:53:61:e4:92:1a:8a:2d:
fe:fd:88:a7:b4:3e:e7:0e:b0:50:39:3b:ea:47:53:
1e:e2:23:08:38:e6:d1:c1:84:d3:58:f1:b5:19:af:
ba:37:71:72:30:b4:37:16:2f:65:74:ff:be:51:37:
b7:39:99:fd:43:ae:4c:63:72:ba:cd:7f:3f:32:4a:
8f:3e:ea:4d:16:d4:ea:ac:c8:75:1f:b3:d4:6a:72:
9f:66:39:47:8e:99:1d:c6:67:e4:04:51:d9:26:58:
a1:ca:89:ec:99:f1:b3:53:42:16:4a:ba:a4:e6:ec:
a6:6e:bd:71:b2:5d:97:cf:35:02:2c:4b:e1:bc:79:
a9:12:de:15:68:9f:6e:7d:a8:d1:d5:53:15:2e:56:
76:86:58:fc:f4:80:12:7a:d7:87:f9:97:15:cc:a0:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:2F:84:3A:89:44:AF:BF:D0:36:FF:EE:5D:87:7C:42:74:F9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6281214-f954-3ee7-8a79-f1be560a525b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:31:4b:6b:f9:8e:45:7d:a1:c2:ae:8c:f9:dc:f2:b0:71:ea:
f7:32:4c:b0:e9:9e:f5:ab:21:79:1f:84:13:0b:23:e4:a2:25:
74:f6:d5:8b:53:3b:fa:22:38:68:13:87:ac:f9:3a:73:08:83:
40:6a:64:7e:33:13:be:c1:bd:0f:da:38:6b:aa:ad:98:1f:15:
84:ec:98:ab:0a:e8:e4:17:69:f6:3d:7d:18:75:84:68:95:08:
46:dc:8e:1a:95:28:a4:0e:88:80:8a:fc:e5:dd:a9:8a:09:2e:
88:9b:5c:29:c3:fb:46:71:95:b2:a6:82:93:ce:51:d6:6f:1d:
52:3a:3f:5a:b0:d5:de:b3:87:93:53:0f:e6:6a:58:7b:19:72:
0b:91:b3:16:b8:44:68:d5:33:7a:0c:93:83:8c:a7:38:0f:1a:
94:6f:dc:26:be:40:1d:ba:07:5b:10:dc:5f:98:1d:15:16:54:
89:bd:bf:9c:4f:c3:4e:78:9d:3e:2c:14:fc:b1:79:a3:3f:fe:
98:9f:07:2c:a9:4c:1b:c5:32:22:75:24:35:f4:29:5a:7b:ef:
3d:ab:74:26:6e:28:d3:f0:31:4d:12:14:70:9e:3a:4a:1a:32:
df:ca:e7:fc:a2:4f:71:b3:b4:a1:8e:10:d8:1f:7a:1b:69:1c:
48:a0:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:46 2025 by rpki-client