Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fea41c76-faa3-35b5-ba93-ecc2090b104b.roa
File: fea41c76-faa3-35b5-ba93-ecc2090b104b.roa (raw, json)
Hash identifier: Bu2WZgqbpbKCLVypsU+PGYNErBLKB2b/bt9+NSqsgOs=
Subject key identifier: CD:CA:7E:29:86:2B:02:A4:F8:5C:C9:2C:2C:51:1E:DE:F8:93:EC:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16696532259
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fea41c76-faa3-35b5-ba93-ecc2090b104b.roa
Signing time: Sun 21 Oct 2018 11:12:02 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.95.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:53:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=d342ada5-e6fd-4cab-ba6b-7e9b96d80add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:83:e8:07:b5:15:a7:1b:74:b9:4e:9e:b1:
bb:ef:2a:eb:91:f7:ba:80:50:e4:73:4b:5e:96:f7:
b3:2c:81:cb:60:5b:c2:04:90:19:03:ff:99:49:e7:
9c:c7:40:ff:e7:7e:ab:9a:11:01:ff:10:f2:2d:81:
a2:45:a0:44:57:bf:f8:e3:c6:fc:c8:32:7e:be:5f:
f3:ee:7b:ae:d1:05:d3:16:f2:57:0c:0c:5f:fe:1d:
26:ec:c3:02:98:8e:ad:c6:75:b2:a5:5a:68:cd:3b:
91:49:06:e0:ba:d3:e5:35:bb:a7:7e:83:12:b5:7b:
e6:eb:d0:d2:8b:7f:3c:81:48:45:b7:f5:a8:c8:15:
53:1e:04:ae:12:81:5f:3d:5d:47:5d:a4:17:a8:eb:
22:f7:6c:a2:1b:24:85:80:62:da:84:33:13:4f:22:
ec:2d:b1:e0:f8:38:c0:35:9f:cd:4b:42:16:0c:94:
22:aa:69:e6:3c:aa:36:ce:60:c2:8c:be:ce:61:37:
32:e2:a4:60:cf:99:c6:68:be:d5:62:fe:66:c5:02:
a2:fa:8e:8f:13:59:a2:ec:9c:a4:6a:ce:64:75:b2:
99:04:65:1a:c5:05:19:f0:a4:d9:90:09:ff:f0:49:
4e:ce:ae:96:e4:07:2b:0a:48:1d:c7:ac:14:cd:79:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:7E:29:86:2B:02:A4:F8:5C:C9:2C:2C:51:1E:DE:F8:93:EC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fea41c76-faa3-35b5-ba93-ecc2090b104b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.95.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4e:7c:c5:26:96:fc:25:65:33:3c:95:b6:5d:88:01:08:82:
c6:37:a4:6a:ed:80:93:b4:48:ca:b7:46:bc:77:a3:4c:02:66:
74:7d:29:a5:e0:1d:9b:d9:0a:44:b8:48:91:64:8e:58:78:d2:
3d:8d:64:23:ca:25:11:fd:c3:4b:8f:a1:9f:6c:a9:b4:29:75:
b0:18:46:90:c9:75:b1:0e:6a:bb:42:b0:57:dc:cf:4f:fe:2c:
ee:b9:e5:03:4c:5d:ab:0c:aa:bc:08:a0:1e:e5:00:64:1b:e4:
bd:51:ba:b1:7f:eb:eb:d3:bd:49:26:5b:6a:79:de:8f:35:12:
fe:dd:f4:6e:d8:7a:1c:e8:e4:5d:90:59:10:6c:dc:c5:e0:a2:
b4:31:e5:97:25:50:77:f9:b6:70:b7:71:37:a9:ba:d0:d8:5a:
f7:8e:13:8d:59:cf:52:0e:12:50:b2:59:1c:be:3a:c0:51:3b:
51:34:ca:fb:4a:98:e9:cd:49:a0:19:97:ec:35:15:d2:d3:c8:
02:81:3d:33:98:28:bf:c6:b8:3c:6d:7e:6d:f7:74:03:6c:9e:
02:da:c7:a6:21:38:77:6b:a3:95:33:32:bc:2d:e0:dd:da:69:
29:01:db:13:6b:62:aa:bb:02:cb:0d:4b:f8:6a:61:e7:07:d7:
84:6c:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:37 2025 by rpki-client