Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052a44e0-bd99-376b-991f-a632ffdf6778.roa
File: 052a44e0-bd99-376b-991f-a632ffdf6778.roa (raw, json)
Hash identifier: YRmCWa7f9Zkab8a80zoUVRfzuiU6nQOYbY3VxxsAsAU=
Subject key identifier: D0:F8:A1:2C:26:DD:66:63:82:5A:35:1B:64:21:CE:81:C8:48:28:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF84F4121FC453B064B0A7980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052a44e0-bd99-376b-991f-a632ffdf6778.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:4f:41:21:fc:45:3b:06:4b:0a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=b5d7c1ef-3ba9-48a3-b448-8f8a651b4dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:c8:e7:d2:9a:e9:ee:38:ba:1e:66:01:3b:
f0:d2:45:73:3d:0a:08:4f:24:72:9b:3e:ad:a9:04:
b7:a3:04:53:56:97:48:62:5c:bf:16:a9:e6:55:ac:
f9:17:92:e2:f9:dc:84:11:7e:47:68:44:e3:0d:03:
b8:1b:00:58:ad:55:ed:77:a5:84:76:88:44:82:43:
77:a9:74:98:3e:08:83:f5:d2:4e:44:69:c0:28:ff:
37:2c:90:66:dc:0a:91:62:1a:d5:0f:5e:63:9d:21:
10:9c:13:5f:b4:52:6b:9c:dc:a2:73:b2:47:0f:65:
91:4c:79:05:74:40:55:d1:eb:5d:e3:bc:e1:7e:cf:
81:ed:81:00:77:f7:97:e0:49:ea:f9:c0:1d:37:91:
e4:c5:53:c8:7b:88:62:4f:d1:ba:22:c9:7c:2e:02:
62:1e:9b:1a:d3:97:e2:18:36:e3:b1:f8:51:d8:2c:
24:cb:64:2a:c5:6b:65:a9:3d:12:5e:aa:6b:60:60:
60:cb:4d:a8:67:17:ca:b4:e6:3f:7c:83:11:d3:72:
c4:2e:cf:d3:01:b9:4b:76:05:43:18:7f:80:a5:a7:
a8:69:07:dd:14:4b:6f:7e:c0:18:2b:6f:c6:3e:cc:
a8:21:57:73:d2:17:fa:8a:3f:a2:58:34:2d:12:54:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:A1:2C:26:DD:66:63:82:5A:35:1B:64:21:CE:81:C8:48:28:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052a44e0-bd99-376b-991f-a632ffdf6778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:30:c8:3e:80:95:36:f6:0c:9f:5a:c1:65:db:ca:a6:9d:99:
2b:74:98:42:da:d9:0e:04:60:b7:af:fc:a6:ea:f6:6c:36:2f:
2d:7b:e1:41:ad:78:97:ef:88:c0:9f:ff:a9:05:54:f8:b4:ec:
3a:be:d3:71:bf:c8:37:28:a3:99:92:b4:d5:19:ab:7a:b1:27:
98:7f:a2:11:44:8f:f9:45:25:61:06:34:bd:f4:93:9c:b3:ad:
58:99:ed:63:81:5f:4d:17:ea:87:7b:29:ea:0a:fe:f0:bf:ca:
98:d9:6e:6d:26:3d:a9:5a:30:a4:b6:41:b3:50:e6:6e:35:f2:
63:9d:b0:d3:39:8d:19:f3:74:e3:70:c6:bc:2a:27:a0:d5:ed:
8b:06:79:a1:42:85:d8:cd:30:54:0f:9c:ec:f1:c0:6a:c9:cf:
12:ad:63:1b:d6:00:3b:c8:be:97:de:35:5c:61:b8:f2:c8:06:
8b:82:1c:58:0f:55:cb:79:c5:02:85:10:12:1f:d4:15:9a:67:
dd:30:9e:f1:af:55:c4:93:60:2e:79:06:1b:6a:89:ab:b4:1f:
d8:59:ab:a1:2b:c8:29:8e:b3:19:13:a9:c2:51:7c:01:6c:75:
2a:0c:4f:bc:65:a4:00:79:15:c0:14:58:be:6a:d7:fd:98:88:
f2:4f:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:12 2025 by rpki-client