Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f2ced16-09a6-3658-a097-19284ac9ceeb.roa
File: 0f2ced16-09a6-3658-a097-19284ac9ceeb.roa (raw, json)
Hash identifier: +IIp+bQRmpTF+qopTXDmu57P8Nk3deFFp9/nVJKldpk=
Subject key identifier: 93:95:4C:B5:63:DB:1F:E9:93:9B:1E:AA:BE:B3:EB:9C:19:03:E5:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9C36CA37FE797F64DCBDDC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f2ced16-09a6-3658-a097-19284ac9ceeb.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:c3:6c:a3:7f:e7:97:f6:4d:cb:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=3d7a2077-7599-4615-b1d2-4d64eb320058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:a9:ce:b3:c6:b0:27:b4:08:ea:a8:66:1d:
ff:c0:2b:a6:53:1e:bb:1e:f7:31:8a:21:f1:7d:51:
5f:db:f6:79:40:bc:e7:d5:fd:23:a9:4d:79:2c:63:
ba:66:d2:bb:99:da:00:10:c3:c2:67:2e:e3:55:01:
db:2f:2f:19:04:81:d7:df:57:0d:bc:0e:a9:75:ca:
7c:ab:7f:e4:d6:36:bc:09:42:07:f4:a5:fe:35:df:
8b:a8:4b:64:e2:68:19:9d:9d:c3:84:f2:94:7d:25:
b1:38:22:5e:d5:f0:73:41:42:e8:31:c4:58:55:4f:
58:42:aa:e7:5f:e6:ae:91:7f:fc:45:1a:58:88:82:
07:35:f0:16:b5:32:4e:1e:ea:31:76:4b:73:c6:07:
5c:3d:d5:74:cd:f8:d2:6f:04:6d:e5:4d:20:a8:a0:
07:e5:6b:3c:5f:97:0e:66:9b:1b:84:30:2f:56:58:
56:61:1a:f8:10:74:af:92:db:59:14:92:00:69:d9:
2f:43:94:15:e0:a5:e5:dd:7c:5a:e5:fd:b3:90:0f:
15:4e:50:28:a9:a9:47:31:d4:07:27:cd:0e:b3:d6:
66:21:0c:08:7c:af:31:45:db:d5:b3:64:0a:89:36:
2a:84:79:63:de:53:38:e2:b9:1d:2c:79:5a:aa:3c:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:4C:B5:63:DB:1F:E9:93:9B:1E:AA:BE:B3:EB:9C:19:03:E5:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f2ced16-09a6-3658-a097-19284ac9ceeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:83:18:36:a9:92:6d:6e:78:1f:18:dd:fa:ad:3a:9a:19:b7:
06:9b:81:1e:7c:5a:e3:2e:59:2c:ef:d2:5f:c6:4d:85:e7:fb:
fd:b2:85:6d:ed:aa:75:02:06:95:02:0b:27:f8:e9:22:11:95:
4e:b4:2a:da:80:fe:6e:22:70:b0:93:c3:22:02:f2:05:93:46:
88:95:7b:d5:6d:06:4e:89:14:ae:ac:f0:35:ae:44:70:68:0f:
62:14:c3:6a:9f:c8:3c:6b:e1:29:ed:e7:77:21:ed:37:dc:6d:
9a:f8:8d:fe:e7:0d:e4:15:33:5b:ae:9f:2a:7b:19:e4:ae:8a:
a7:65:b9:c3:37:7f:b5:9e:c0:4f:5c:8b:c9:e1:69:5b:c5:d6:
ea:23:7f:83:44:7a:34:c5:71:f9:56:6e:06:a1:ef:4f:6e:10:
5c:76:51:f9:6d:a9:53:9b:8a:74:fe:76:6b:07:c5:30:7a:3f:
36:8f:4d:7f:62:0e:f1:92:b5:5e:85:57:59:e9:09:c1:dc:29:
d9:a0:32:ea:4d:0a:07:51:44:5b:3b:5d:93:81:95:68:91:f8:
ce:c2:05:1d:62:af:0e:f8:40:a5:e1:a5:0e:2b:e3:7f:2a:13:
b0:19:ca:d6:b3:37:80:b0:06:de:c5:b9:8f:b9:b7:6a:95:59:
53:c4:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:47 2025 by rpki-client