Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1672ccf4-3c23-3f37-99dd-8a073a6f2c44.roa
File: 1672ccf4-3c23-3f37-99dd-8a073a6f2c44.roa (raw, json)
Hash identifier: XuDnhkbXeNG8vOXktyYVN+9IMbf2P7WrCXD0a0fXKjA=
Subject key identifier: 7E:2A:F7:AA:9A:32:FB:CD:97:25:09:67:E7:BB:D0:09:95:6A:7B:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D79AD9353BE787F820A2F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1672ccf4-3c23-3f37-99dd-8a073a6f2c44.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:79:ad:93:53:be:78:7f:82:0a:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=c99236b7-0326-46b8-8369-bc22c0645509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:40:90:52:6d:ca:04:21:ce:9a:65:59:ac:
67:a9:a6:39:14:8c:4e:89:91:0b:35:01:f0:7e:9e:
6f:84:de:da:a8:8a:6e:8d:05:5b:93:10:c3:ba:77:
94:c9:03:78:e0:be:da:d4:d0:14:7a:b9:cc:12:9e:
ca:be:60:9e:a2:96:a7:31:22:1d:98:c3:61:04:8a:
79:6b:80:e3:f9:fc:b8:49:b6:83:05:be:d4:35:de:
a4:44:d5:65:f8:17:39:64:dc:9c:77:b1:cc:f8:ae:
ab:ab:eb:8a:b7:8b:2c:6e:60:ce:96:60:49:8d:bd:
9d:9b:ec:af:0d:17:f8:bc:8e:97:88:e9:55:7d:96:
22:7b:5f:8c:78:91:22:4c:38:ef:e6:c0:55:7a:10:
68:e0:f0:4e:85:71:78:08:2b:39:51:c6:1a:89:a5:
ea:ad:57:e0:8a:1c:65:7f:97:b8:84:93:00:56:4d:
9d:66:93:90:a8:f4:6c:10:7c:90:01:5a:63:11:c3:
ac:1f:40:5c:9d:7f:bb:87:59:61:ec:36:1b:e8:95:
2d:dd:79:1b:58:d0:0a:fd:e1:ab:39:42:2b:fc:77:
d9:86:7d:5c:05:ee:9b:32:31:78:e6:e1:18:72:d3:
3b:06:d6:5f:76:6b:81:5c:b3:c0:f8:1c:47:4f:0f:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:F7:AA:9A:32:FB:CD:97:25:09:67:E7:BB:D0:09:95:6A:7B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1672ccf4-3c23-3f37-99dd-8a073a6f2c44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ca:4c:30:cb:2f:74:91:b5:14:01:39:3e:0f:5f:5f:00:b3:
f7:7a:f1:69:d6:67:4f:8d:de:11:cd:b5:42:cb:39:4e:3f:37:
d9:f5:76:c0:76:7f:28:b1:fd:cc:0b:d1:35:66:aa:bf:3c:65:
83:b6:f6:e6:ea:ea:bd:f8:c6:a6:c0:67:5a:b7:c3:e1:0b:3b:
4d:a4:0d:4c:f4:47:d0:1e:31:b0:f0:e5:d4:a6:90:59:b4:fb:
ee:61:e4:0b:1d:1a:25:86:3f:cd:63:54:5a:17:ce:17:b4:37:
74:08:b8:70:94:03:70:10:fd:2e:5f:ea:b9:14:69:56:05:74:
15:7b:c0:5c:66:9b:b3:e9:45:98:7a:7b:96:c1:fc:a9:ed:24:
e2:29:de:9f:b2:be:87:96:46:5b:4d:9e:fb:51:e4:98:fe:0f:
fd:54:ab:0b:6b:cc:73:41:2e:c9:91:f1:94:13:2b:9f:ca:14:
25:74:be:43:3a:ad:9b:8d:6c:0f:31:c9:7c:72:45:4e:d0:75:
17:1a:d5:3d:92:d3:e5:e2:e7:50:02:1f:8a:ea:32:45:79:fd:
2a:1d:47:82:04:b7:89:c2:5d:ce:50:bb:8a:d9:95:a9:e1:dc:
87:47:c5:c0:19:96:ab:cb:be:4b:40:8f:14:53:47:5f:94:92:
bd:e4:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:11 2025 by rpki-client