Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dea2eaa-223a-308a-b07a-9d6e74fbc54e.roa
File: 0dea2eaa-223a-308a-b07a-9d6e74fbc54e.roa (raw, json)
Hash identifier: gUhsGRv3PHKOjbi3jXC5JC9ZfloR4Li+TrTWTFlqdK4=
Subject key identifier: D1:53:EF:A0:A4:4F:9B:77:45:0D:0B:8B:E3:85:02:4F:25:D3:9B:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840903294934771BCCF2BB35080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dea2eaa-223a-308a-b07a-9d6e74fbc54e.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:32:94:93:47:71:bc:cf:2b:b3:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=4e22a417-7ee8-4d58-8882-3ecde112e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:31:9b:f5:92:26:29:8c:07:fa:a7:04:69:
9a:a5:71:61:6d:62:40:09:37:66:17:d9:4a:44:80:
a1:7f:32:95:2c:9f:48:1c:1b:0e:72:cf:42:c0:6d:
54:36:70:ff:a3:ad:01:0b:e7:30:9e:46:be:6c:22:
5f:f8:5a:a7:cd:ee:cf:50:23:e6:50:8c:bd:d3:8d:
02:9f:e8:f2:da:17:72:29:a4:f9:d9:90:5f:d4:e2:
09:bf:2c:87:76:c9:14:07:2b:fb:cb:7f:e2:a7:3d:
98:04:6b:ec:94:7d:f3:ef:92:3e:c4:88:94:e1:e2:
b0:94:b6:e6:d8:01:27:37:76:bf:2f:8c:ba:bf:af:
00:f5:da:b6:bc:7d:83:3d:e5:fe:b2:e0:ed:2d:2b:
e4:91:65:ab:17:c6:af:97:6b:4e:d0:f1:78:b1:5d:
a7:d7:d4:db:57:f2:0e:20:f9:22:9a:6b:74:ea:49:
73:60:f7:5e:cb:4b:88:43:84:62:07:92:4e:07:b1:
1a:3f:2d:fd:e9:cf:3b:47:72:e5:bb:cb:5d:80:38:
77:7f:f8:b3:83:26:6f:d2:08:da:54:21:44:c2:10:
40:1a:c2:55:41:9e:63:57:c1:9b:99:b1:07:17:f6:
67:a5:cd:f8:16:20:d8:07:bb:5b:a6:5c:78:46:fa:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:EF:A0:A4:4F:9B:77:45:0D:0B:8B:E3:85:02:4F:25:D3:9B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dea2eaa-223a-308a-b07a-9d6e74fbc54e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:24:03:80:42:74:3e:2c:b5:f6:26:4d:f2:03:44:8b:6e:1b:
a7:44:ea:b1:cb:32:cb:3d:3d:7c:89:3d:a2:2a:ba:38:51:8b:
20:4c:4d:bf:58:ee:06:e7:d4:f2:3b:34:4c:88:4d:0d:9a:9c:
ef:d3:09:81:4a:49:8d:28:7a:34:c3:d0:36:7d:ba:81:da:ec:
c1:78:a1:5d:dc:39:57:e4:24:31:41:24:e1:1e:98:9d:ef:f8:
c6:35:06:f5:10:21:50:89:36:c9:90:02:6c:4d:99:c5:74:9f:
ac:c1:ab:14:2e:d7:35:c3:7b:a9:1b:a1:1b:7b:fc:26:a1:00:
8f:ad:7b:47:20:14:72:a7:08:75:6c:77:70:2a:64:6b:b2:16:
c0:30:8c:c8:6b:b0:dc:ce:36:e3:89:6a:4c:81:82:e2:c0:09:
96:ad:86:3d:c9:d9:11:83:5f:f5:29:ca:04:d2:ce:f7:6b:96:
91:98:20:2d:bc:96:5f:21:88:14:b8:d9:9d:9a:e2:a9:b3:bd:
b2:cf:e2:a5:5a:33:40:45:cb:5c:bb:23:d7:95:6b:86:c2:f0:
2f:e9:f7:1f:e7:e5:59:20:93:12:e3:a7:fc:50:e7:81:1c:23:
30:80:5f:71:a5:d6:4b:47:96:5d:11:48:86:db:02:dc:d2:10:
2e:c9:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:33:07 2025 by rpki-client