Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04cefe93-9a8c-3261-b284-4283015a979e.roa
File: 04cefe93-9a8c-3261-b284-4283015a979e.roa (raw, json)
Hash identifier: nmNsapUUIUMQuZWFwkNuXFvAeF6OWco+fLm8J76EyKw=
Subject key identifier: E0:98:2C:01:D4:D6:2A:0C:60:D2:61:33:D5:95:C5:08:DA:8C:79:70
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584045F4AAF1DF1FC3C54D0FB93E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04cefe93-9a8c-3261-b284-4283015a979e.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:45:f4:aa:f1:df:1f:c3:c5:4d:0f:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=5bc3de7c-82f2-4f81-8955-88e467506543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:b9:ea:68:56:01:9b:5c:20:bf:5d:74:06:
f1:46:f7:a6:ad:cf:9d:d8:10:9b:3c:58:f4:80:3d:
15:66:85:6d:fd:01:3e:65:0e:86:bd:61:bc:e6:56:
8e:37:1b:30:93:63:99:21:04:dc:ed:bc:f3:05:a0:
78:d5:69:26:42:ae:50:c1:67:b3:e4:7f:ec:2a:67:
a1:79:bf:3f:4e:99:1c:4a:24:78:cf:76:ad:08:0b:
0c:ec:3f:4e:9f:7c:5e:05:d6:9b:f1:be:ae:f0:da:
3b:6f:9b:61:6c:ad:a1:c9:d7:ac:4c:cf:49:7b:75:
3d:0b:57:99:0a:5a:2f:c4:0d:d8:b3:7c:a3:2f:dc:
3b:70:fd:1e:c9:1f:cf:f5:f5:da:8b:43:2f:f6:62:
a7:a2:4d:c3:32:dc:7f:4c:36:5b:fb:68:bc:26:d4:
5c:f5:92:44:34:58:d7:54:28:16:bd:10:38:e9:14:
fb:71:85:84:52:34:5d:bc:79:c6:2e:1c:9b:95:d6:
88:d0:92:78:d1:16:a0:88:44:4d:d6:3c:d9:c7:6a:
7f:d7:0d:53:96:13:ae:41:bb:47:a7:52:de:92:01:
1c:dc:12:f2:79:f8:0c:c9:95:72:a5:cd:a2:1a:a3:
19:16:c5:c3:02:a3:06:2a:ae:a6:92:82:10:c2:83:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:98:2C:01:D4:D6:2A:0C:60:D2:61:33:D5:95:C5:08:DA:8C:79:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04cefe93-9a8c-3261-b284-4283015a979e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:99:08:3c:fd:d2:5c:6f:81:c3:88:93:ef:c1:08:68:e7:b6:
e0:bb:54:97:a1:dd:d3:5b:13:64:b5:28:71:4c:df:cc:5e:31:
fb:bf:38:35:91:a1:bb:65:6a:f0:2b:94:f7:ff:eb:e4:f2:2c:
25:55:6f:23:14:f9:8c:a9:98:60:fe:27:bd:eb:de:24:80:66:
fa:41:d7:be:11:18:19:bf:91:14:b7:ac:2c:f6:28:7b:69:b4:
19:c5:17:d2:3b:e5:68:30:13:03:46:a9:3c:19:cf:0e:96:da:
de:01:84:03:0a:d7:6a:db:6e:11:e9:59:84:7f:40:61:d7:1f:
f6:81:78:4f:68:b9:1f:84:a6:d3:0a:07:f2:95:26:a0:3d:d7:
81:63:82:56:a5:f6:b0:57:82:01:c3:87:62:72:4b:26:a9:48:
da:60:09:d1:70:a1:db:0d:12:cc:1d:29:c5:82:d5:6c:fb:35:
9f:4c:a9:a1:34:a0:3a:a5:09:35:1e:9f:b0:6d:3b:72:84:33:
82:a3:0d:8c:78:1d:15:8d:76:89:01:47:74:61:07:0b:48:80:
58:ef:90:5a:ef:dd:ae:7b:67:dd:58:54:97:09:1a:68:d5:1f:
a0:24:8b:01:ea:b4:d1:2c:ea:b5:ef:24:4d:ce:77:f8:0e:eb:
91:de:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:29 2025 by rpki-client