Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0963528b-e086-33e5-8f52-3606c4dc4c98.roa
File: 0963528b-e086-33e5-8f52-3606c4dc4c98.roa (raw, json)
Hash identifier: BsCtv2cfDt+kfnggkJT5ep0ll2+5GSLBgddaBXW7VjY=
Subject key identifier: 6C:24:B8:31:03:DF:30:C2:EC:4E:65:96:DA:0F:81:4B:ED:27:59:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B6705B5694AF71919046F3D0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0963528b-e086-33e5-8f52-3606c4dc4c98.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:70:5b:56:94:af:71:91:90:46:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=5395f5e2-d22d-42d0-9e85-4c208d744496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:17:a7:a1:92:d1:d3:4f:3b:9b:b0:58:90:
7c:58:05:67:bb:af:2f:30:f5:5c:f2:6b:c2:5e:74:
68:6d:ba:7a:48:b4:eb:b9:4d:75:16:13:a7:c1:e9:
22:86:ff:48:14:b9:73:b5:4a:05:5e:67:4c:c4:04:
57:14:6b:fb:d3:30:68:47:11:98:2d:52:ce:58:79:
cf:4c:99:49:d3:67:82:65:84:be:a6:d3:73:d3:b3:
52:77:21:07:a6:99:0e:06:49:a6:fb:0a:be:aa:91:
28:26:0c:79:73:03:fe:1e:df:7a:9a:66:40:85:6c:
dc:5f:ac:ea:0d:97:c8:32:fc:a8:bd:21:bd:f0:f8:
3c:86:54:f5:7c:f3:74:90:a3:23:67:90:52:dc:a2:
35:ed:64:c7:f0:b4:ea:72:73:69:8c:04:37:ed:f8:
66:71:8f:18:11:34:e4:55:61:c0:3f:cd:85:70:58:
a5:89:68:10:80:39:6e:e1:1f:cd:bc:8f:cd:eb:7b:
b1:a6:5c:43:39:39:5b:d8:d5:af:8e:c4:29:e6:22:
a6:63:31:96:de:d6:5c:bc:0c:f0:94:1e:0d:15:fb:
db:5d:e3:d8:09:67:4e:f2:d5:3e:95:82:f8:cf:6e:
f1:1f:c5:61:28:03:dc:5b:67:04:f3:64:31:68:ac:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:B8:31:03:DF:30:C2:EC:4E:65:96:DA:0F:81:4B:ED:27:59:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0963528b-e086-33e5-8f52-3606c4dc4c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:b5:68:a6:ca:01:ad:c4:b0:b6:ee:32:81:9c:05:7f:06:31:
0d:4a:cc:20:94:44:fd:2b:0e:03:b8:b7:ae:9e:0e:bc:a9:ad:
b1:e0:e3:1a:27:9a:0e:56:2a:db:38:aa:43:c8:27:7f:f3:96:
c4:8c:a0:83:30:5e:1d:21:7a:03:96:73:3e:0c:a4:05:7a:70:
93:8b:fc:10:f5:a2:7d:ad:c4:dd:08:dd:af:21:f6:c5:f4:e5:
00:7a:0f:06:e9:33:0c:6e:da:ce:9c:70:d3:49:f0:6d:27:63:
e9:17:45:6f:ca:24:a1:04:f1:4e:91:c2:ba:f3:5f:d1:6c:4d:
cb:db:0e:84:ff:cf:ee:d7:cf:b9:47:e7:dc:e8:cf:26:90:3c:
a9:a8:a8:d7:bc:d5:39:69:70:0a:c0:63:ec:55:7b:d2:01:ab:
f1:88:be:43:61:2a:b6:a2:79:08:6b:01:95:7d:ba:bf:a9:ec:
37:bb:e5:6e:1a:3e:f3:eb:54:72:2f:cd:47:64:40:e4:02:14:
e4:37:c1:81:f6:39:a5:27:2d:a7:c8:24:a6:4c:88:15:5e:23:
b4:69:f8:a8:1b:19:6d:60:9e:7d:5b:2e:f2:86:2c:fc:cd:d0:
ab:a8:09:eb:6e:c6:32:2f:98:7b:41:09:83:a8:a8:27:b0:d4:
e8:33:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:22 2025 by rpki-client