Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa
File: 158dc257-83f3-32d4-beb9-910342a3efb0.roa (raw, json)
Hash identifier: 8jS683fjG0HJg/ALP82n8BuKVtcgJ/98IdHxTOBwfmc=
Subject key identifier: A4:0D:DD:41:5F:CE:44:A4:05:00:28:9A:AE:A7:A4:13:E4:02:6C:90
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D24DAD7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa
Signing time: Wed 10 Oct 2018 08:43:08 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.169.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:da:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=560bbb5b-9131-4de7-a689-cab729f8f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:03:39:5e:cc:1b:49:99:c0:99:56:54:a3:
88:a8:70:9c:5b:55:59:ba:68:67:f0:9c:e1:71:f1:
54:c1:7a:4b:4d:3c:6d:09:e1:dd:3a:4f:50:58:2f:
0d:45:80:db:c9:33:39:13:0b:ed:5c:d4:4f:f7:61:
47:32:a3:3c:04:91:ef:26:9c:37:af:3a:04:d4:3c:
88:77:ad:f2:3a:cb:a0:9a:e8:65:86:9c:3a:7f:29:
2b:b8:fa:9b:bc:aa:02:6b:85:62:d3:99:ad:c9:37:
d8:b8:8d:db:2c:50:34:ab:35:2b:9b:c8:9e:eb:59:
b9:f5:c7:92:9e:0e:80:ed:4f:c0:d3:51:20:45:21:
47:f3:cc:af:1f:b6:f4:ad:48:76:83:5b:c8:3d:28:
a4:41:03:10:ab:b8:7d:00:60:74:d7:3b:7a:d3:27:
17:67:13:bd:89:2c:d6:da:6d:40:d1:f9:10:85:c9:
69:eb:30:17:00:95:78:67:df:5f:79:3e:18:a2:9d:
43:bb:51:e3:93:83:88:ae:e1:c2:73:b7:85:50:19:
bb:9e:61:8e:0f:56:e8:a5:9f:28:8a:35:fd:d6:68:
08:2d:af:63:9a:e7:9f:3e:a4:55:ea:71:35:a3:23:
3f:76:60:36:29:b9:94:3b:3d:58:bb:78:42:54:9e:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:DD:41:5F:CE:44:A4:05:00:28:9A:AE:A7:A4:13:E4:02:6C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.169.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:1c:59:f2:80:80:77:92:99:6c:8c:43:33:98:a8:2a:d2:57:
52:ac:00:a0:17:96:c0:72:12:a5:92:5a:14:5a:dd:68:16:f5:
1a:a8:1b:f1:61:f3:ec:70:83:e3:d2:72:fc:fb:ac:34:8e:8e:
42:bb:14:44:a1:68:df:cc:cf:e0:28:a9:99:d5:be:19:3c:fc:
d6:0f:48:b6:93:85:61:e8:78:3c:bf:8a:1d:d6:35:a8:43:7e:
2b:77:6c:7c:cc:53:0a:2f:d5:74:71:20:83:97:42:0e:87:1f:
3b:5a:c1:b9:47:ca:07:cd:00:46:8d:08:49:85:76:f3:2d:fb:
90:b9:d2:09:ab:8e:6d:f4:dc:af:39:4b:86:60:62:0a:a0:3e:
99:9f:62:c5:ec:56:1f:b7:a1:e2:c4:6a:c3:27:2a:d3:d3:fc:
ac:46:fa:84:f9:0b:7f:d8:79:cc:5f:c5:aa:a3:df:55:03:8c:
24:a1:ab:f3:b7:3f:a0:ec:12:7d:e8:5a:53:8f:ff:4a:f2:c1:
5f:92:fa:62:87:8f:db:df:04:5e:24:32:fc:90:93:45:17:23:
9b:d9:51:a9:19:65:2d:c7:c0:15:b7:e5:09:a1:16:5b:11:3a:
2a:c7:2e:ff:b4:6d:b1:28:51:2a:b4:c8:d6:b9:92:66:5d:2b:
d3:f4:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:01:24 2025 by rpki-client