Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0888c2ad-421f-3276-aa2f-5cb829992cf4.roa
File: 0888c2ad-421f-3276-aa2f-5cb829992cf4.roa (raw, json)
Hash identifier: Nc0XE3K3khJNxwO5TLOr0HFnuCPm3UA/kDqzcDu2zy0=
Subject key identifier: 46:D5:83:77:BC:37:8D:41:CE:87:8F:D0:3F:39:ED:6B:4A:A7:07:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F6C4EE1C3B384C317BCF580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0888c2ad-421f-3276-aa2f-5cb829992cf4.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.100.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:6c:4e:e1:c3:b3:84:c3:17:bc:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=54e7fbda-f518-43ae-9d69-8ea2ec221b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:59:d6:9b:5f:7c:16:87:c7:94:23:82:b0:
cf:f0:63:52:7f:10:a1:84:50:af:52:e8:5e:be:cd:
5d:c3:af:85:2b:77:cc:bb:80:95:b7:00:a6:23:84:
71:13:b8:95:35:b1:46:98:11:62:7a:f8:5c:26:75:
ed:c8:8b:9c:3f:b2:60:2a:2d:39:17:dc:21:87:b8:
46:f2:1e:f2:aa:79:1c:2a:70:fc:f8:fa:97:a2:72:
e9:45:47:79:33:b4:96:e5:c1:ae:80:e0:ed:67:25:
f4:c8:cf:8b:31:19:cd:ce:a4:d0:a5:0e:41:5e:e4:
9b:03:f8:ba:38:81:d4:fc:e7:bb:db:0b:e0:05:92:
7f:d7:38:2e:31:cc:c6:6b:e1:79:79:75:57:64:58:
56:e6:32:8f:b2:ad:06:3d:9b:cf:28:80:67:c5:7c:
a2:79:47:bd:a3:8d:05:a8:dd:78:ee:00:f2:40:95:
52:6e:45:47:92:13:e5:01:4d:1d:18:a4:7e:cd:73:
70:34:1c:63:8d:e6:60:e9:df:9d:7e:1b:e4:9f:8d:
14:94:2b:1a:5b:3b:dc:86:d8:b9:6a:98:e2:8b:b0:
dc:33:67:a9:3f:7a:a1:bf:91:0f:de:2f:03:92:a2:
6f:4a:e3:28:bc:7d:5c:5f:ff:97:b1:ee:10:72:c0:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:83:77:BC:37:8D:41:CE:87:8F:D0:3F:39:ED:6B:4A:A7:07:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0888c2ad-421f-3276-aa2f-5cb829992cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.100.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:94:99:c5:eb:c8:4a:8b:50:f6:17:27:5c:47:a7:2a:83:2b:
97:ce:72:b5:98:ff:6d:2d:f6:b8:63:5e:b5:17:12:f5:ee:f8:
34:2e:d9:ed:81:24:99:38:31:7d:23:95:f8:da:de:b3:6f:18:
22:d7:7e:7d:ed:90:92:ff:4d:21:b7:7e:92:ec:05:dd:d7:ab:
4b:d2:52:b1:db:37:aa:56:50:01:9b:39:2e:59:7d:d7:c3:04:
7a:8b:70:ba:60:7f:f3:69:38:8d:a5:59:04:17:cc:f1:b1:f0:
26:4b:5a:62:a1:69:c1:df:13:bc:37:3f:f5:f6:fe:d1:2c:0e:
f0:4a:dc:3c:49:f5:e0:95:d3:a2:1a:2c:2a:aa:73:de:46:e5:
07:71:ee:10:25:94:36:b5:4b:ba:5d:49:42:4b:c2:ba:b4:2f:
e8:39:a0:69:46:bc:04:fb:32:f4:93:78:df:21:82:17:0c:ac:
35:19:45:b9:3c:34:d2:14:3b:c8:b8:19:a0:a9:be:48:1a:f9:
7c:d7:a9:23:2d:f0:eb:2e:ce:69:ec:c5:7f:90:e7:c8:75:f1:
c7:f6:32:7c:b3:1d:78:10:0b:a9:ea:d3:d8:bb:3e:6c:6f:1e:
d2:60:98:2e:2b:69:8d:79:25:c6:a9:96:db:2b:ee:95:23:eb:
59:1b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:27 2025 by rpki-client