Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa
File: e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa (raw, json)
Hash identifier: vAblUcCXDeT5mCEOdiifWR3tydjlckunVlavD/DMtfI=
Subject key identifier: 03:55:81:B5:58:E7:2F:9F:7A:62:2F:FD:1F:67:A7:FC:A6:DA:0E:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16693C6D1E8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa
Signing time: Sat 20 Oct 2018 23:19:32 +0000
ROA not before: Sat 20 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 52.60.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c6:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=0c6d8a20-8d90-4768-942a-e95360da7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:09:5e:4d:70:18:2b:6a:80:b0:4a:19:1a:
94:bf:e8:44:34:3f:cb:a3:99:96:9d:15:18:90:6b:
65:18:b6:98:cc:b4:a0:93:5e:65:11:4f:e0:6c:9b:
57:ce:52:70:46:13:47:32:9f:db:49:65:1f:20:2f:
ee:43:67:c7:9e:27:ad:1a:cc:86:57:17:bd:f2:ac:
85:c5:bb:da:59:60:5e:d9:11:8b:f4:b3:33:46:68:
31:cb:01:15:79:3c:51:28:db:2f:70:75:dd:74:10:
bd:7f:c9:11:4b:68:75:07:43:4f:03:f9:8d:f0:0b:
1b:b8:2c:e0:60:6d:f9:3a:12:cf:68:84:fa:10:b7:
1d:80:be:e5:4b:1a:d7:45:01:f6:68:0e:7c:eb:8b:
b5:7f:a9:1d:ff:77:ab:26:56:55:97:a0:c3:f9:59:
7f:2b:bc:e4:39:b5:96:c6:0b:8d:fe:97:64:04:58:
65:86:a2:e7:85:66:00:7f:d6:97:a8:a2:92:28:28:
54:53:02:b4:57:33:78:a3:7f:bd:06:57:47:bb:00:
64:81:6a:ce:d8:51:f2:42:e5:ba:e2:a2:80:8b:11:
2e:c7:85:91:a7:01:77:10:c5:9f:9f:87:d6:50:95:
6f:f1:02:0d:df:e0:32:61:c3:6c:fa:1e:e9:e7:69:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:81:B5:58:E7:2F:9F:7A:62:2F:FD:1F:67:A7:FC:A6:DA:0E:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.60.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:0f:08:b4:32:e6:e8:01:26:bf:d5:14:44:fe:7c:87:27:bd:
36:09:fe:2a:d9:3f:ff:36:55:34:ff:82:41:1e:d7:fb:93:4c:
78:32:26:d9:09:f7:38:f6:58:85:73:69:4d:41:48:da:40:6c:
ce:0d:69:e4:5b:02:2b:5c:64:12:ad:9f:eb:45:7e:7b:38:8f:
e4:36:bb:20:41:73:99:c8:5f:c5:a9:c6:6f:b4:3a:1e:62:15:
ae:e6:c0:e7:ff:ae:cb:ca:d7:34:48:60:bb:24:e8:90:3b:d6:
f7:5a:f6:cd:21:3c:f1:dd:cd:49:26:bb:96:f7:33:c8:59:9a:
f2:03:fa:8e:76:61:7e:e0:3a:42:cf:b2:1c:44:ef:18:e0:03:
91:46:d0:7d:2c:99:ac:2d:ff:68:e4:b2:3a:04:4a:00:54:eb:
88:0c:42:04:a0:78:7b:96:5c:b9:ef:57:7f:f6:2f:79:be:2c:
0f:f0:cb:d6:4f:70:22:64:ef:2c:e0:e9:9b:83:ee:43:0b:ad:
47:4f:74:4d:76:c7:5f:c6:9d:6c:bc:fa:82:50:02:aa:b0:b7:
af:41:8e:98:ea:a3:ea:95:b3:bf:01:27:18:e4:14:c9:0f:fa:
61:05:f8:98:b8:aa:bf:73:84:37:35:77:33:c7:3e:e3:f4:95:
90:14:d3:0f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpPG0egwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDBj
NmQ4YTIwLThkOTAtNDc2OC05NDJhLWU5NTM2MGRhN2ZmMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM2GCV5NcBgraoCwShkalL/oRDQ/y6OZlp0VGJBr
ZRi2mMy0oJNeZRFP4GybV85ScEYTRzKf20llHyAv7kNnx54nrRrMhlcXvfKshcW7
2llgXtkRi/SzM0ZoMcsBFXk8USjbL3B13XQQvX/JEUtodQdDTwP5jfALG7gs4GBt
+ToSz2iE+hC3HYC+5Usa10UB9mgOfOuLtX+pHf93qyZWVZegw/lZfyu85Dm1lsYL
jf6XZARYZYai54VmAH/Wl6iikigoVFMCtFczeKN/vQZXR7sAZIFqzthR8kLluuKi
gIsRLseFkacBdxDFn5+H1lCVb/ECDd/gMmHDbPoe6edpsjcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQDVYG1WOcvn3piL/0fZ6f8ptoOSDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2U4NDU5ZWM0LThkMzgtMzc4
Mi1hNjk4LTBkYzQ5YzNjODllYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTQ8ADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAvQ8ItDLm6AEmv9UURP58hye9Ngn+Ktk//zZVNP+CQR7X+5NMeDIm2Qn3OPZY
hXNpTUFI2kBszg1p5FsCK1xkEq2f60V+eziP5Da7IEFzmchfxanGb7Q6HmIVrubA
5/+uy8rXNEhguyTokDvW91r2zSE88d3NSSa7lvczyFma8gP6jnZhfuA6Qs+yHETv
GOADkUbQfSyZrC3/aOSyOgRKAFTriAxCBKB4e5Zcue9Xf/Yveb4sD/DL1k9wImTv
LODpm4PuQwutR090TXbHX8adbLz6glACqrC3r0GOmOqj6pWzvwEnGOQUyQ/6YQX4
mLiqv3OENzV3M8c+4/SVkBTTDw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:29 2025 by rpki-client