Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06255081-3368-3829-a211-811c84c2d19f.roa
File: 06255081-3368-3829-a211-811c84c2d19f.roa (raw, json)
Hash identifier: 3qEiZfyVyKIhKFrNC12fjj5G36g4wj6vrPcvag1kcdU=
Subject key identifier: D6:8E:1B:99:3D:EC:10:08:45:0A:C7:45:E2:86:35:46:64:94:71:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF233EBFF2267EE36510C9BD0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06255081-3368-3829-a211-811c84c2d19f.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:33:eb:ff:22:67:ee:36:51:0c:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=5e83c343-9383-42c5-93e7-aa9ce3a5e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:34:c4:f2:c8:51:5a:85:2d:0d:59:02:35:
6d:c8:8d:eb:83:21:15:1a:d8:01:a0:7a:d2:76:56:
89:c3:9b:d7:90:b4:66:07:f1:b5:40:53:0a:f0:c3:
96:ab:b1:0c:db:b5:8c:ef:ed:af:c7:0b:a0:a9:95:
ac:4d:54:73:c9:66:79:84:0a:4f:da:46:d3:b4:bc:
4b:44:55:64:68:79:3e:eb:f5:1f:44:d9:23:b5:dc:
b9:a5:1a:62:fa:d8:11:82:30:ca:91:a8:04:f6:6f:
50:f6:ff:d1:d6:19:e7:e9:14:52:a6:bf:1f:53:55:
ef:cb:8a:c4:fe:b4:00:d4:f8:1c:c2:72:b2:88:98:
bb:5f:98:5c:9a:a6:33:f3:73:58:96:91:95:5f:43:
28:f5:b5:46:96:7c:4e:9e:65:26:7b:45:92:b0:c2:
85:94:4d:c2:49:1a:ff:80:3f:17:7b:3d:b3:83:d9:
1e:06:84:75:93:46:58:2d:d7:f4:06:5e:e9:e5:0b:
fb:78:aa:08:17:9e:37:90:af:01:9d:94:ab:60:9e:
ed:31:29:e0:f7:4c:40:a5:11:10:cb:9c:df:09:3f:
32:be:8d:78:ec:ae:8d:ca:cc:59:8f:b2:74:12:12:
3d:38:12:22:16:85:e6:4b:7b:7d:93:03:b7:c5:7a:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8E:1B:99:3D:EC:10:08:45:0A:C7:45:E2:86:35:46:64:94:71:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06255081-3368-3829-a211-811c84c2d19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:81:b6:2d:6a:d2:2b:89:55:5e:02:bd:9f:fc:52:2e:22:3b:
f4:22:0f:e2:0c:e6:2d:bf:40:48:61:dc:9b:1b:27:a6:cc:b8:
3b:35:a2:69:ea:55:39:f7:85:1a:f0:73:b0:2d:b3:49:9c:58:
5a:d8:96:28:c5:f1:b9:75:7b:51:78:ca:d2:89:81:5f:8a:35:
80:3a:b8:f8:b7:a1:66:65:46:2b:d4:48:a6:ee:93:95:7f:08:
8f:c4:ec:c8:cd:82:9a:0c:07:0b:f6:39:23:e7:3f:67:03:c2:
f2:b1:5b:ee:69:b1:2b:92:5f:6b:eb:fb:02:2f:db:4e:2b:58:
48:ef:95:17:ae:fc:31:f0:60:6c:08:eb:0e:bb:92:dd:0b:78:
5b:af:40:5f:97:93:44:a1:75:e8:cb:0c:c6:e4:45:9b:a5:fa:
48:13:5f:73:d1:4d:88:18:5b:16:79:72:a2:8c:ec:03:d0:7e:
e2:a4:de:78:08:be:d0:1c:c5:c0:02:db:89:6d:13:0a:99:23:
62:7c:8a:95:9b:67:00:31:02:80:f7:cb:0c:00:5e:2b:5f:c6:
87:97:d5:8c:6b:8d:68:5a:9f:9e:34:5c:64:28:fc:68:56:14:
5c:8a:23:04:51:70:98:75:1d:42:e3:aa:1b:8d:ca:dc:20:10:
b6:74:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:24 2025 by rpki-client