Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dac1d9c-7459-3b18-9444-6cc45a61bfb3.roa
File: 0dac1d9c-7459-3b18-9444-6cc45a61bfb3.roa (raw, json)
Hash identifier: HxDuJl+KltYLkS/7SOuyin6CUqS5ZjupcNKi2Q5cOT8=
Subject key identifier: 4D:2B:19:9B:85:B6:CD:56:28:92:B5:82:6F:CB:DA:58:05:6F:E5:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840473C2CA1A2640552F0F2A6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dac1d9c-7459-3b18-9444-6cc45a61bfb3.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:3c:2c:a1:a2:64:05:52:f0:f2:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=54c5f244-e397-472b-bd1d-34e718e67b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:5b:d8:8d:20:b0:af:d0:3e:7f:0c:65:3b:
82:6d:3f:17:eb:1c:d8:67:22:68:47:4d:cc:54:ea:
f9:5e:0e:fc:45:1d:e3:c6:61:90:7e:a1:c0:92:23:
94:cd:71:f3:fd:02:a6:f8:35:b8:68:6c:bb:ce:d8:
77:d6:d4:d3:81:bb:f4:3c:9e:4a:fe:51:ba:e1:ea:
94:78:9f:23:95:c7:33:4c:ee:20:f7:b3:29:a5:e7:
26:ee:d6:d9:76:8c:e6:54:e5:55:52:d1:57:aa:f8:
b6:bd:9b:66:b5:ab:43:fd:8e:dd:5d:ae:4a:00:ba:
3f:b6:4f:ce:e9:8e:8a:c3:a3:61:52:9d:e8:26:c8:
a3:c1:bd:54:b5:6c:f8:3e:c1:6b:9b:01:31:3d:4f:
32:66:ff:40:83:da:59:7c:33:43:4b:e9:fe:db:9d:
92:10:bc:d0:14:6a:2f:74:34:19:d9:d4:5a:e6:d5:
83:5a:fd:61:67:a2:34:2c:22:08:e7:33:c7:52:b6:
29:d5:35:9a:d4:53:1d:26:d4:87:71:64:4f:ee:1f:
c2:80:0e:77:32:f3:b6:9b:e3:fe:be:ca:de:8e:9b:
f6:c8:1b:5f:0a:ae:aa:0e:de:b4:da:9f:a2:4c:a4:
25:32:36:8e:de:b8:5d:cb:80:e1:84:2e:81:72:1d:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:19:9B:85:B6:CD:56:28:92:B5:82:6F:CB:DA:58:05:6F:E5:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dac1d9c-7459-3b18-9444-6cc45a61bfb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:57:12:32:dd:56:78:bb:4a:e7:93:dd:3b:24:d0:b4:fe:14:
10:7a:2d:b9:a7:74:00:9d:3e:8c:cb:f8:17:d7:82:ac:53:5d:
c2:09:20:4f:80:43:ca:a7:90:1c:04:03:db:82:6b:9a:b9:ba:
92:15:21:b0:bf:82:22:b4:cb:9b:29:6c:87:10:3f:fd:66:2d:
7e:98:4e:ae:31:8d:ce:ee:a9:33:86:b3:92:64:c8:7a:b5:f9:
a9:17:fd:0c:6f:6b:35:ca:f5:77:e0:dc:bc:55:d3:ad:a3:7a:
5a:0b:e1:2c:02:12:49:2e:22:e5:15:24:44:44:da:b8:92:d0:
c4:fe:88:76:2c:f5:f2:19:cc:bf:c1:3a:9e:de:40:bd:0a:2a:
07:73:2d:96:b6:51:86:ce:b2:e6:cc:cb:14:cf:16:3e:af:48:
2b:ef:27:fe:a8:20:cb:b2:b2:ba:aa:a9:de:a2:c3:a8:71:59:
54:08:03:2c:9a:48:37:e6:19:5e:0f:09:5c:ae:ee:f5:a2:23:
92:2b:a1:02:40:e4:ba:f3:10:f5:3e:18:af:6e:c7:4c:40:48:
f1:39:51:9a:cc:9b:31:07:fc:96:1d:f2:2b:ec:d6:98:d2:b1:
5f:fe:2b:40:cb:70:99:b8:2b:80:76:38:f2:5a:64:34:1a:f6:
3d:db:aa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:11 2025 by rpki-client