Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb3d2af-2bb8-36a6-9db9-a0eeede8ae8c.roa
File: 0fb3d2af-2bb8-36a6-9db9-a0eeede8ae8c.roa (raw, json)
Hash identifier: qSS2GWFpdu7uK5HwCBOyDRjxOMp2tW1RlYTMi4kyoK0=
Subject key identifier: 95:8D:23:0E:18:C3:33:6E:44:4A:52:E2:99:9C:72:13:C6:28:00:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C92EF98FD70F976EE43FB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb3d2af-2bb8-36a6-9db9-a0eeede8ae8c.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:92:ef:98:fd:70:f9:76:ee:43:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=5da803be-e588-4612-87c2-a26960a1861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:88:e1:b8:e9:3e:32:fe:4f:4b:24:b2:c5:
40:64:71:1b:3f:ee:81:b9:f1:60:f2:69:2d:75:6e:
1d:ad:a8:0f:02:5f:c8:56:68:97:f5:a1:40:d5:a7:
f3:88:15:c8:f2:28:98:da:b0:0b:e9:8f:f1:c9:9c:
93:10:5d:77:98:e3:dc:7f:a4:60:3e:ed:58:53:0d:
59:ae:dd:79:1e:8a:c8:84:5d:36:f1:7f:b7:b0:03:
c8:3a:74:c5:f8:74:5c:e9:96:db:c1:06:5e:ec:2a:
5b:41:e4:7a:c6:a7:a5:f3:db:5c:90:98:97:13:ff:
fc:70:ea:59:81:26:73:28:ac:06:be:35:b9:c0:31:
7f:68:69:39:14:e1:ce:77:b8:de:71:6f:22:a6:ad:
c9:00:45:41:4f:8d:6c:2e:d9:bf:3d:26:f8:b0:06:
c8:e7:b0:b9:d4:f4:7e:25:29:6b:b6:d6:78:98:39:
1c:12:6b:de:6a:80:bf:ed:c9:08:e9:4d:f2:24:cd:
fd:d8:a3:21:e9:89:34:1e:26:4b:f3:d1:7b:bc:0c:
8b:d7:78:48:17:f8:30:cf:d3:c5:92:ea:d6:75:51:
ec:8e:e6:22:bc:3e:d0:61:79:8b:da:60:f6:91:31:
79:46:5a:e9:84:60:6c:8e:2b:52:7f:a5:eb:c8:b8:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:23:0E:18:C3:33:6E:44:4A:52:E2:99:9C:72:13:C6:28:00:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb3d2af-2bb8-36a6-9db9-a0eeede8ae8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:7a:74:41:d5:9d:07:f5:70:3d:07:19:0a:2d:03:82:7d:ae:
c8:52:19:7c:40:66:6c:dd:20:d1:02:da:da:22:b6:45:f7:fc:
63:f6:0e:47:44:5f:6c:fe:c5:3c:68:f4:3e:b1:85:36:50:58:
5e:1f:1e:58:fa:73:5c:f5:e4:4b:7a:ad:65:43:58:58:b7:b9:
f8:ed:c9:2b:42:51:b2:df:6f:3b:86:79:ea:e7:c0:51:26:e5:
e3:34:7e:08:37:ba:9e:21:7f:4c:b4:0e:68:17:86:da:dd:84:
34:2d:66:29:b0:41:76:07:23:87:64:34:07:d6:ea:7a:04:07:
73:bf:e4:6d:c4:66:19:75:d2:53:59:b8:72:57:93:22:65:a8:
ba:83:df:58:46:ea:58:91:5b:6c:f5:6f:bf:e9:5a:93:7c:d2:
f7:56:6b:57:73:1c:38:6b:6f:83:fd:8f:f3:fd:8e:46:5a:bc:
31:d7:2b:23:8b:09:62:e4:d4:19:ec:81:e0:1b:f3:be:a5:5c:
9c:8b:d4:7e:44:75:18:70:e9:9b:7c:40:d1:83:42:7f:79:da:
33:2f:82:e5:bc:c3:3b:93:44:98:91:3e:1f:08:fc:ad:4f:89:
33:a8:bb:d8:48:31:ea:11:ec:f0:8c:0e:a2:94:9a:36:e5:d9:
e2:9d:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:15 2025 by rpki-client