Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa
File: 5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa (raw, json)
Hash identifier: TgO9aEoZrG+ctpbK37rL6l1p+dYDrR8DE35OFnv4iQw=
Subject key identifier: CB:71:1E:9C:D5:FE:E6:A0:0C:AA:72:C1:8E:24:28:74:8A:7E:45:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C07E72C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa
Signing time: Wed 10 Oct 2018 03:31:53 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.214.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=86ed1b92-7cde-4f5f-9ce6-9d0c6250bd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:a5:64:19:d5:9b:33:7e:41:c9:b6:ac:f9:
d0:e9:b4:38:c6:62:f2:3b:ff:f7:64:bb:70:83:3b:
36:6c:de:b5:56:12:e4:e9:7a:f3:51:63:8d:10:7e:
70:7c:f4:34:ff:60:af:e5:0f:87:66:83:5d:eb:09:
af:f1:f8:d4:31:cb:52:c7:f3:c1:19:44:2e:87:39:
a2:cf:98:f3:93:38:67:0f:5e:ec:fc:14:cf:4d:39:
af:6e:c1:d9:e8:1a:ae:ee:b7:d4:c9:a2:82:7a:f0:
89:2f:bf:92:8e:fb:f4:fc:62:c0:dd:06:72:b1:7b:
68:72:f3:e5:8e:bb:40:48:f5:32:65:2d:a3:00:51:
5d:9b:c3:7a:64:24:30:a8:0a:75:28:ac:db:41:59:
5f:06:b5:39:8c:43:0f:6e:6a:86:63:40:e1:7f:42:
d9:b9:06:4c:4b:7d:fc:27:aa:da:da:45:1f:45:35:
73:4d:65:1e:b6:02:5e:6c:fc:97:ca:47:42:bc:5c:
0b:dc:2d:6d:be:06:b4:77:ea:0c:21:dd:79:4c:a1:
61:c3:b6:95:ed:9c:1a:dc:ba:da:4e:b1:14:f1:45:
f7:d0:5e:6e:61:2d:e4:65:78:d3:b3:b2:53:76:58:
93:76:e3:5a:28:ce:f1:e8:8f:80:9f:b4:a0:f0:9a:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:1E:9C:D5:FE:E6:A0:0C:AA:72:C1:8E:24:28:74:8A:7E:45:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.214.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:c1:ff:da:33:29:2f:84:d2:73:50:0f:23:0e:61:3c:2e:eb:
0d:8c:d4:ce:cb:2c:17:31:b5:7d:7d:f9:2d:32:ea:31:bc:7d:
77:e7:9e:39:bc:b8:2c:b5:62:d3:ec:ed:de:87:6f:92:a8:43:
6c:a4:b7:04:bf:c0:f5:66:03:71:5b:74:e8:c2:29:f4:7a:b0:
4f:a0:4b:5c:d6:bf:fa:14:eb:2f:fd:be:f4:99:cf:ad:18:80:
4a:b8:be:9c:74:f2:e6:a7:a2:95:ba:45:07:e0:79:b3:fb:6e:
28:f2:61:4d:66:c7:df:22:94:35:98:ae:da:cd:83:0b:a2:22:
07:e7:45:00:f2:bb:d9:1e:21:1e:60:27:33:01:89:75:14:cd:
1b:29:17:ca:61:de:c2:57:1d:65:21:56:a6:2f:6f:4c:54:d2:
88:d3:1e:e5:ca:11:cd:6c:dc:ca:83:79:8b:19:48:c3:57:2c:
71:56:3b:d4:a9:2d:16:88:5f:e3:05:69:a3:58:5d:4d:90:c6:
6f:60:21:bb:55:c1:1e:3d:32:09:24:73:14:45:c6:88:9d:c7:
2f:eb:06:a3:8e:55:7b:c3:ad:90:74:a1:a8:de:18:0c:08:f0:
fd:17:f2:9d:2e:4b:b7:dd:95:4d:bd:82:91:da:8e:53:9a:b8:
47:a2:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:36 2025 by rpki-client