Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099106b3-6ca6-38e4-a0cd-c65df4f2c7ee.roa
File: 099106b3-6ca6-38e4-a0cd-c65df4f2c7ee.roa (raw, json)
Hash identifier: IEjjztaTHYFpzOnDJaH6btUKM76HhYPTwihq7jsNzS4=
Subject key identifier: E0:16:AB:D4:0D:90:41:9C:DC:A3:79:35:7C:9D:FD:D5:FD:44:51:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0AC44F6C56190A829FD5080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099106b3-6ca6-38e4-a0cd-c65df4f2c7ee.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:ac:44:f6:c5:61:90:a8:29:fd:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=dec8d61b-af63-420d-aad4-6598d2d0bb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:39:e2:6c:91:f9:eb:75:8a:d4:35:f0:f5:
66:76:2c:c4:2a:15:bc:33:c9:eb:b5:3c:65:a7:8b:
80:d3:67:c4:5d:11:3e:47:25:b2:19:21:38:0e:67:
af:4e:e7:0f:bc:bb:fa:be:0d:cb:89:89:b4:72:88:
7e:48:d4:02:b7:6f:4c:3c:3d:88:55:5d:5f:5e:d8:
75:9d:b4:c9:10:65:d5:c9:01:b3:34:7d:a0:34:2c:
81:a7:c8:a9:16:51:73:aa:1c:f5:57:44:e5:66:03:
ed:6f:4a:a2:e3:53:53:77:9b:7b:0e:76:ee:02:46:
28:0f:62:a4:d8:51:7d:dc:d8:86:74:35:d6:be:d7:
0d:eb:14:8f:76:13:af:07:ae:58:f5:a5:86:0a:8b:
14:b7:60:e1:05:12:df:e2:b7:7e:f9:c9:9c:79:2e:
60:67:a3:82:cb:2a:a2:e6:83:0c:7c:96:40:2e:80:
ff:d4:a9:47:5f:0f:af:e3:78:21:9d:3e:b6:be:a8:
44:06:0f:87:11:b8:46:72:60:fa:9d:60:7b:21:99:
94:29:df:f1:75:b4:50:2c:b0:2e:3b:1c:4f:8e:d9:
90:92:ca:13:2e:c1:90:23:83:4a:64:18:dc:52:8b:
c0:0e:ce:9a:3a:15:bf:8b:70:14:23:26:35:e9:c5:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:AB:D4:0D:90:41:9C:DC:A3:79:35:7C:9D:FD:D5:FD:44:51:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099106b3-6ca6-38e4-a0cd-c65df4f2c7ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:6b:7b:bf:46:80:cb:6a:24:14:3a:5b:65:d4:bb:41:a7:5e:
a6:05:76:f1:71:3d:8a:d2:2f:4d:7f:13:7e:e8:ac:54:79:46:
ca:a2:f9:2b:48:b3:ae:0b:88:f5:dd:12:1e:b4:05:ff:20:9b:
8d:48:0c:8a:2f:fe:80:46:6e:ba:d7:ac:01:55:06:6c:52:df:
30:b6:c8:0e:9d:9c:a5:de:89:3f:e3:4c:93:0d:24:d4:3d:d9:
b8:ee:f8:20:90:e7:4c:4a:25:dc:b1:33:55:44:75:2a:f2:2d:
14:24:10:da:77:ee:a0:b8:3a:20:f4:d5:74:45:15:6d:00:c7:
b6:ab:a2:11:04:38:a4:a1:55:34:7f:3c:81:f8:24:ab:ae:a7:
bc:cb:56:55:e1:be:a9:38:b4:4d:5a:73:80:e2:31:bb:2a:cf:
09:bf:59:cb:97:6f:71:72:c7:ea:5d:63:23:bd:62:dc:36:9b:
c6:d0:2b:23:10:af:b3:48:ea:06:0a:62:93:7a:42:3c:cc:ed:
0e:96:c5:82:f5:59:bc:46:f2:89:bf:f8:10:9a:94:99:f3:87:
29:29:24:77:ea:38:b1:7f:ec:1f:9a:33:68:62:29:d4:99:85:
f8:fa:4b:dd:74:55:01:b5:cf:2d:77:a4:46:cc:9f:78:69:f8:
10:ab:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:57 2025 by rpki-client