Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1732282f-bc16-3470-8acf-4ee1aee40dfc.roa
File: 1732282f-bc16-3470-8acf-4ee1aee40dfc.roa (raw, json)
Hash identifier: 1IOuslfDje3dhShZkvPufAD6YMC9HajXDzQscqKBojM=
Subject key identifier: D0:6E:66:13:18:29:D3:A3:A4:5F:F1:A3:30:D2:A9:8B:D4:76:7E:70
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D24E53B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1732282f-bc16-3470-8acf-4ee1aee40dfc.roa
Signing time: Wed 10 Oct 2018 08:43:11 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.169.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=8be74d2f-be3a-42e9-9a2b-e9bb062ca6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:a7:71:59:7f:b0:d2:aa:d5:08:ad:d4:1d:
2f:04:4c:f4:6c:06:ab:09:5f:a5:f9:01:b1:32:e4:
1b:c7:a5:8b:d5:e6:a0:79:db:07:b3:52:92:c2:a4:
29:35:a3:b0:61:a2:94:16:de:69:49:53:8d:8e:ce:
5f:f0:cc:9b:ac:e4:d5:65:43:be:1f:95:a8:5c:74:
b9:1e:e3:0d:8a:e5:01:99:0f:7e:b9:9f:94:1c:ad:
e3:fc:0b:c6:a2:0a:8a:73:b0:6f:1a:11:88:34:61:
0d:59:2d:cc:cd:ab:d6:de:92:04:ac:f0:5c:2e:10:
63:59:ed:dc:5c:fc:59:fd:2f:f7:ce:55:32:0a:9e:
25:aa:7f:95:3a:ce:c6:8b:a5:0b:f7:00:13:90:70:
ac:39:ac:3d:9d:f5:b2:f8:0e:33:89:81:f6:a6:32:
64:ba:d0:cc:93:1a:01:c3:78:3c:da:ad:5b:6c:77:
7d:c0:24:2c:7e:47:3c:45:75:df:94:5b:91:7c:12:
3c:38:24:76:98:e0:91:2d:c3:c4:68:73:ef:a3:6d:
98:9e:5b:b5:81:60:60:d4:b0:3d:5b:e9:14:08:38:
27:af:d3:41:b2:9d:71:43:f7:92:52:72:fa:14:52:
c7:cc:bb:7b:f6:93:85:1c:6a:9b:c8:9f:0a:ad:8f:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:66:13:18:29:D3:A3:A4:5F:F1:A3:30:D2:A9:8B:D4:76:7E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1732282f-bc16-3470-8acf-4ee1aee40dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.169.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ff:dd:9e:b7:54:93:a7:b2:19:fb:41:04:dd:55:86:24:75:
ad:f4:63:97:c0:58:42:70:b3:1e:42:35:61:5c:be:e7:d9:72:
34:be:3f:6e:f3:9a:86:37:bf:fa:3e:bd:88:17:af:ca:20:d6:
63:f0:34:92:79:a0:a0:5d:5d:90:e3:6c:03:25:0e:66:06:97:
e5:33:ef:00:65:20:07:4b:cb:3b:9d:31:90:00:10:cb:f9:ad:
c1:d0:31:3f:a4:a7:cf:45:f5:13:85:0c:8c:d3:67:07:69:a0:
45:96:90:d7:1d:70:cb:bf:64:f3:c7:86:49:e1:6d:1a:0c:5b:
ac:91:8a:97:c3:ed:91:fb:94:f8:a9:53:dc:ad:66:e8:33:1c:
1a:21:d0:e0:76:53:3c:85:76:b2:4c:3b:0f:68:bd:f2:e6:f0:
33:0f:4d:8f:8f:23:b2:ae:d7:c7:f3:79:02:17:35:e5:a6:5d:
b1:c3:ad:53:f2:f0:95:00:bb:a1:75:0d:b2:c0:88:b7:41:cf:
3d:e0:06:65:84:82:81:cc:bb:7f:f8:5b:d8:86:90:bf:67:76:
88:2d:fa:31:d1:9f:8e:33:7b:d9:87:fc:b0:99:d0:65:74:17:
42:57:c4:80:7a:9f:cc:82:f2:29:4d:3a:b6:bf:e7:f6:04:17:
0f:6d:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:47:26 2025 by rpki-client