Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa
File: 75273e27-6cc7-31de-8f1c-9c040d250b10.roa (raw, json)
Hash identifier: r4AizjAueIJuc4p6XA95s61IGmws9DOnGRxVQZdcJqk=
Subject key identifier: 48:4F:DF:B6:D1:9D:CC:6C:33:DF:53:A6:71:39:F9:AB:23:71:2A:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665C080065
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa
Signing time: Wed 10 Oct 2018 03:32:00 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 54.218.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:08:00:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=9d8ee469-6171-4538-984a-a16bbd2103fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:9c:48:b8:1c:9c:9a:53:bd:ce:7d:1f:4f:
23:8a:69:6d:3f:dc:91:85:70:85:33:51:46:69:97:
71:37:23:56:a1:8f:5c:46:ed:1c:5b:6f:ea:e1:0b:
3a:d6:aa:54:07:b0:4b:d9:72:bb:f3:b9:a7:20:dd:
ca:1d:f5:47:cb:4d:3e:4e:e9:b7:9a:a6:eb:f6:8f:
08:db:dc:1c:31:21:bc:a5:f0:ac:45:03:59:7b:2f:
04:ea:a8:c6:3d:15:17:f4:c1:27:02:06:91:03:ea:
11:64:c4:69:56:85:a3:b8:06:5f:e1:c1:70:a3:04:
ab:e3:18:38:28:6b:bc:fa:b7:94:ba:4b:90:5d:96:
d7:5e:ec:dd:c6:e4:ae:d5:08:c0:51:12:ff:65:46:
cf:e6:48:65:cf:04:97:99:60:46:87:d7:94:21:6d:
1d:a1:6f:0b:97:a5:2b:13:c0:55:32:b3:1b:b2:02:
8f:12:f2:ec:01:06:7e:a2:c1:e4:29:02:23:f8:fd:
7a:6f:db:19:06:b0:6c:33:28:e5:5e:7e:6e:fe:e0:
0f:ba:7f:d4:aa:8c:9e:36:5b:56:69:2c:0e:14:3b:
38:31:73:ea:79:f5:5b:09:d8:b0:28:61:2f:1c:42:
5c:41:41:9e:be:b1:19:1c:8c:c7:a6:13:2a:bb:99:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:DF:B6:D1:9D:CC:6C:33:DF:53:A6:71:39:F9:AB:23:71:2A:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75273e27-6cc7-31de-8f1c-9c040d250b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.218.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:ee:56:61:19:02:38:52:21:14:4b:c4:8d:91:ac:6b:f1:47:
5f:eb:01:ea:21:6c:0d:14:61:97:88:b6:90:28:bc:da:72:a9:
55:8f:4b:83:bf:3e:93:99:9e:5b:03:dc:45:60:29:00:b3:49:
ac:d4:37:c9:f4:c9:99:fd:27:0c:bf:f1:80:cf:bf:76:a3:ee:
c0:d7:cf:90:3d:74:e8:0b:63:65:0a:45:e8:cf:af:6a:ab:b5:
50:51:d4:f9:d6:7d:e2:63:ae:27:57:6d:ce:6e:09:71:aa:89:
b5:7a:a9:0c:f7:69:13:6f:d0:3c:65:85:f0:77:2a:15:ff:9d:
b1:a5:ed:21:4e:8a:91:c1:d1:a9:bc:76:42:60:ee:6b:76:f1:
0e:a6:27:8d:93:e0:c6:6d:56:2f:18:34:27:d6:05:27:7a:63:
ad:27:6c:f2:7b:21:6c:c8:de:bc:3a:df:12:86:20:22:e0:2c:
b1:9a:bd:ef:c5:5f:f7:09:7f:aa:ca:13:e2:18:3f:fe:cd:d0:
df:1d:89:24:65:9a:02:d1:5b:8a:e0:49:ed:44:1f:5b:a1:0c:
0b:48:19:15:f2:5e:4d:3d:72:90:ed:6b:c9:b7:e6:ea:ca:c4:
93:50:1d:4b:76:a9:2f:8e:23:f3:c7:4f:f1:eb:73:66:b9:86:
b7:70:db:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:53:20 2025 by rpki-client