Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12bfff21-4efc-3793-9adf-1c128df8f7f2.roa
File: 12bfff21-4efc-3793-9adf-1c128df8f7f2.roa (raw, json)
Hash identifier: Yn6Ux6K0CpztImFpgN5OBBI/M1ouCRGgm9XUIRPpWUk=
Subject key identifier: 49:0F:C4:1B:01:B8:0E:66:9B:E7:F3:4C:56:3E:F2:6C:25:93:8D:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB08A7659A2A95433C371180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12bfff21-4efc-3793-9adf-1c128df8f7f2.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:08:a7:65:9a:2a:95:43:3c:37:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=30cc9e14-e061-44a8-8adc-18bc0a9c9261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:80:6e:35:3f:ea:4d:19:d5:67:52:1f:72:05:
bd:7b:9d:b9:40:2a:61:40:b5:d9:31:47:55:64:ab:
35:89:58:ce:03:03:e0:da:7f:fb:6b:13:2e:02:1e:
0e:7f:d6:4e:90:c3:cc:c8:89:32:be:1c:0e:4a:48:
fa:1a:72:b9:1a:e5:78:51:a6:84:aa:e7:2c:dd:43:
ad:0a:37:5a:03:84:19:4b:36:4d:9e:38:ff:1a:a2:
ab:05:59:c4:ed:92:3a:46:c4:26:8e:1f:3c:62:11:
97:39:b6:93:24:ee:73:70:0c:ef:b6:45:50:ef:d8:
0e:1f:9c:ac:63:ef:95:b1:9c:f1:13:fc:54:c2:8e:
9b:42:68:a4:13:76:98:c5:7b:2a:2a:fc:2e:fd:80:
03:06:b1:8d:ab:cd:c1:7c:2a:6d:79:35:57:dd:18:
be:15:25:d1:20:05:a7:e2:0f:cb:ee:3f:dc:ba:65:
15:0e:d5:3b:43:4e:13:be:7c:77:f9:41:95:49:cf:
fd:44:26:6f:98:84:14:8d:92:e0:a7:c7:bf:80:58:
76:96:92:2d:d3:2b:8c:72:65:53:11:44:d2:e6:e0:
81:17:40:a5:cc:3f:0c:c2:89:ae:72:5f:e8:92:69:
1c:90:53:56:ab:75:50:47:d6:59:1e:d6:10:9a:5b:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:C4:1B:01:B8:0E:66:9B:E7:F3:4C:56:3E:F2:6C:25:93:8D:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12bfff21-4efc-3793-9adf-1c128df8f7f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:09:24:f7:53:31:81:7e:cc:56:44:76:70:10:3c:73:1b:72:
21:ce:7f:e2:3b:04:7d:09:49:76:a5:a7:01:e0:b9:b2:cf:bc:
ff:03:5d:7a:19:d8:3f:58:ba:c0:38:5a:2c:c9:5f:86:6b:1d:
16:88:6f:79:a9:85:3a:e8:2e:74:31:aa:16:63:99:3c:05:25:
6e:9a:a6:88:8b:75:13:2b:8f:fc:f9:d9:de:8e:46:eb:29:63:
04:bc:e5:08:96:28:31:70:66:14:3d:bd:4a:32:14:2e:a8:a0:
47:c9:36:c4:fd:21:1a:0a:a2:ae:99:37:03:ce:22:e6:72:85:
03:63:a6:1f:e3:83:4e:54:12:1e:50:ee:15:0f:a4:bb:32:73:
9e:d3:59:7d:b1:c8:ee:09:3b:c8:82:12:d3:17:66:e3:80:cb:
21:f7:bc:2e:78:c7:56:f6:c2:10:e5:b7:e6:46:6c:5f:1f:98:
e8:79:f1:ca:d5:ec:a9:7e:54:ad:60:b3:19:ea:1d:fb:d4:28:
fb:8d:f8:ad:45:79:98:d7:b4:ca:fb:a4:48:a1:ba:5b:5d:9d:
11:b2:d6:8b:48:af:ab:a9:49:bf:36:c8:9a:25:88:0a:80:46:
bb:99:ae:ca:ba:9b:b5:47:ce:69:e9:23:9d:ca:1c:e0:14:fb:
4a:e6:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:48 2025 by rpki-client