Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10a3a6df-659e-331d-84a2-51b0d57ad14b.roa
File: 10a3a6df-659e-331d-84a2-51b0d57ad14b.roa (raw, json)
Hash identifier: 8xKq3DZLGfxWtyYkC/gf7tIldVjoyAtxJ3UJOz/25AU=
Subject key identifier: E5:D7:22:89:BE:EB:E2:3D:53:4E:2C:77:3D:84:73:D1:7B:97:87:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401E072336F28EA3E9F2960880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10a3a6df-659e-331d-84a2-51b0d57ad14b.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.232.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:07:23:36:f2:8e:a3:e9:f2:96:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=a8996824-f656-4b6b-a0ae-6205432ce496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:14:7f:09:3e:c6:70:ee:33:75:7b:18:e0:
f4:0d:4e:f5:73:92:27:92:27:79:fb:7b:45:99:dd:
98:d9:18:6c:6f:38:62:cd:e1:09:c5:f1:e1:be:28:
f6:89:51:d7:56:1e:13:dc:7c:d8:d4:3c:12:d8:ef:
42:2b:65:61:d9:04:d9:98:1b:40:a6:c6:08:22:82:
21:f1:7a:10:8c:f3:72:f0:78:40:07:d0:ee:c9:8c:
05:df:aa:37:5b:02:8b:36:3f:74:42:fa:aa:19:e9:
2f:ba:b0:5b:49:b8:ec:a6:87:eb:78:7d:22:c3:fd:
a4:22:d0:14:ab:1c:dc:db:4a:51:8e:8c:64:ca:e9:
b1:ee:87:39:d0:b2:e8:33:08:29:73:63:52:3c:d8:
29:8d:a6:d6:d6:71:c0:c2:43:3d:6e:24:73:9f:72:
37:6a:18:2d:7f:d2:6d:1d:88:9f:2f:20:ad:64:e9:
e0:6d:87:03:78:9e:ad:a8:83:6e:02:e7:3e:0b:6e:
51:d5:57:8a:cb:48:ec:98:fd:1c:4b:56:56:32:58:
3c:29:f5:e6:96:9b:6a:3c:0f:74:fe:11:13:18:26:
d8:0e:0e:27:dc:43:81:fd:2b:e4:bc:83:38:8b:9c:
53:90:8e:b5:e3:a6:ce:77:d1:01:29:51:36:98:a1:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:22:89:BE:EB:E2:3D:53:4E:2C:77:3D:84:73:D1:7B:97:87:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10a3a6df-659e-331d-84a2-51b0d57ad14b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.232.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:aa:a6:c7:2d:9d:17:1b:54:0c:64:b2:2b:0e:7b:2c:fc:53:
37:7f:2b:81:78:ea:6f:e9:7e:5e:64:55:a5:24:44:6c:c9:43:
2a:18:c7:69:af:0f:26:7f:a4:9c:86:60:1d:43:fb:81:27:61:
73:a9:41:4e:37:34:b9:a6:49:b7:0f:b9:89:c8:f0:bd:ec:4d:
83:7f:5e:e8:7f:2a:f6:0d:af:01:c4:6c:07:22:33:68:fa:f8:
b0:92:e2:25:98:2c:a3:39:0f:f5:c0:1a:c1:2f:0e:52:d2:77:
51:f2:b3:3f:7b:11:e7:70:4f:76:32:11:48:5d:14:cb:d3:45:
23:b2:f9:5e:1b:da:55:30:75:0c:66:7c:c7:23:d7:d8:bb:26:
e5:fa:8a:a2:cc:b7:50:8e:d7:68:e6:66:7b:5d:1c:b7:ff:42:
80:c2:59:36:f9:e7:2f:47:96:ac:4c:54:32:95:53:bf:74:92:
fe:33:ef:82:da:02:38:07:09:da:d8:9a:5b:3c:9a:14:8c:87:
bc:59:78:6a:78:f2:5e:f7:91:49:5a:4d:17:52:58:10:90:12:
fa:be:c9:67:8e:8f:34:9f:aa:2e:ca:62:5d:6b:ee:a1:7d:99:
bf:3d:2e:f0:49:73:7b:9e:25:85:19:24:31:90:b9:34:09:da:
cb:4a:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:34 2025 by rpki-client