Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b85855-0fc4-3c6d-be84-66c76fc01b5d.roa
File: 10b85855-0fc4-3c6d-be84-66c76fc01b5d.roa (raw, json)
Hash identifier: dLZ/y8MJTjgPAJtoQsF42RtvkiLIN/eXri9pndTCNLw=
Subject key identifier: DC:59:A0:91:42:FF:BA:44:F1:FE:AB:F4:4D:65:B1:0E:71:9B:9C:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3CD379C409C4711C6D34200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b85855-0fc4-3c6d-be84-66c76fc01b5d.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:cd:37:9c:40:9c:47:11:c6:d3:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=26997c18-d04d-4e22-8442-98bd2cde3770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:be:4a:49:62:60:b3:a1:35:31:b2:03:11:
b8:73:41:b8:c2:c0:e5:90:ae:13:1f:12:da:ba:c8:
72:db:22:a9:e1:1c:64:4c:e2:05:e1:dd:e0:85:89:
1f:0c:36:8f:40:29:c9:eb:0e:a1:d1:44:19:c0:ec:
8b:56:4c:ce:b7:c8:b0:83:18:0c:bf:b7:79:20:3c:
4f:e8:48:7a:1d:93:a6:01:a2:ae:61:de:25:01:3b:
63:6d:de:de:a8:c1:30:46:4f:13:d6:f1:a9:11:58:
85:1e:d2:68:f1:03:ae:a0:b7:99:60:d2:a5:3c:1b:
19:ec:a5:47:4a:83:ae:23:4c:fb:32:8a:c8:11:12:
2d:8c:c3:29:87:0c:95:32:c2:3a:59:60:7a:46:6f:
14:86:57:84:be:bc:5c:1a:e4:98:b6:ae:3a:a7:12:
bf:a2:dc:15:f7:7e:d8:f2:22:72:a2:48:45:53:46:
2b:21:78:47:d4:04:ec:f6:ce:33:f5:c9:45:81:dc:
bb:e1:34:7c:85:0d:df:25:fc:e0:d8:ed:ef:17:30:
dd:df:ff:f4:95:c5:6d:49:d2:4a:7c:73:9c:a5:fd:
90:9c:41:52:a1:d4:79:2f:2f:79:7f:94:b7:dc:06:
c2:3a:69:55:b0:11:fa:52:c6:60:02:2f:07:72:eb:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:A0:91:42:FF:BA:44:F1:FE:AB:F4:4D:65:B1:0E:71:9B:9C:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b85855-0fc4-3c6d-be84-66c76fc01b5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:4a:d1:35:97:7d:1b:af:87:7b:06:4b:d5:82:ae:5a:62:e5:
37:be:03:b6:78:55:c7:93:9c:a8:44:fd:40:bc:1c:41:59:16:
b3:55:c4:7e:cf:8f:0f:e4:ca:22:37:62:f4:0a:7e:b7:27:9d:
ce:88:2f:de:ed:75:5e:5a:0d:b8:d1:62:eb:13:1e:a0:3c:15:
bf:4f:9e:dc:1b:a0:9c:6a:34:ad:a8:39:43:46:cf:16:94:75:
c9:b3:ee:aa:9f:20:5c:af:c5:91:72:1f:5c:2b:08:fe:50:49:
5b:40:5c:45:d8:16:58:a3:37:89:52:7c:41:0a:cf:ac:ce:82:
c2:c5:08:46:16:08:3b:22:e9:d5:e6:a6:1e:42:85:33:93:ff:
2e:32:17:c2:3a:4c:57:75:8e:2c:92:5f:f6:7b:c8:1d:a4:f3:
23:44:05:0c:6c:87:fb:3b:ea:21:e1:8e:37:7a:78:02:6d:df:
20:0c:78:5d:c2:7f:fa:f3:2c:d8:9b:19:91:ba:c2:f7:17:47:
e1:90:17:0e:60:e1:82:ee:81:67:64:bb:99:37:ae:55:fb:8e:
81:ef:31:2a:bf:6d:3a:80:8b:08:34:ce:6b:68:0b:b8:c3:1e:
ee:81:3d:dc:1f:22:1e:48:f0:4d:dd:79:64:85:59:ee:07:90:
fc:ff:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:59 2025 by rpki-client