Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f07150a-65bf-304f-99bc-b7794bedf14b.roa
File: 1f07150a-65bf-304f-99bc-b7794bedf14b.roa (raw, json)
Hash identifier: xeOB+0ukfpO9XSlg3AYcMbJ/QIUVtPqfF5yaaO+nYoU=
Subject key identifier: C2:CC:EF:0D:DB:86:1D:45:E8:9F:1D:85:72:1C:2B:C5:4C:13:60:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FFA0FDBF49E967DF6547180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f07150a-65bf-304f-99bc-b7794bedf14b.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:fa:0f:db:f4:9e:96:7d:f6:54:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=f5a1c9e1-4838-4df9-9153-c53f5b180c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:2b:16:3e:c5:a9:f8:0d:c9:2c:59:8d:95:
62:42:4c:a1:6a:20:45:cb:09:32:54:08:d7:83:10:
e4:39:e0:14:27:22:dc:61:ce:ab:e2:84:f8:f7:a7:
12:68:aa:19:df:b1:d6:94:81:7f:b8:16:93:e2:0b:
9f:94:d7:59:fe:0e:3d:42:f5:5c:5e:fa:34:93:49:
9b:6b:77:53:00:43:76:91:00:a1:ea:d6:7a:8d:af:
71:97:35:30:b4:ef:ce:f0:f3:ca:f4:52:18:7b:84:
4d:72:43:b8:ca:5f:7b:43:7f:1d:07:d5:85:3f:ca:
0f:d7:4a:6f:60:ec:f3:61:72:31:c8:ed:df:5d:d7:
5d:87:36:f1:5d:35:2b:da:1f:22:1d:cd:b1:26:f2:
77:2d:0b:ef:6b:3c:aa:cf:34:e7:3a:8e:6f:56:84:
cc:36:f9:a9:89:17:3d:3c:ed:18:8f:6d:a6:b2:23:
90:46:08:53:34:db:f6:ab:7a:d8:ee:62:5b:0b:a0:
4d:72:46:2e:6e:78:1c:76:26:64:40:92:35:fc:ac:
e5:b7:eb:12:62:89:81:ad:63:b7:3d:e6:76:04:91:
ff:a6:43:b9:75:b0:b1:cd:60:ee:a4:e1:29:fe:ad:
18:c2:32:4e:28:59:b9:1d:39:ee:25:14:dc:bf:cb:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:EF:0D:DB:86:1D:45:E8:9F:1D:85:72:1C:2B:C5:4C:13:60:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f07150a-65bf-304f-99bc-b7794bedf14b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ad:b4:1a:fc:ec:f5:5b:38:5c:ae:53:4f:f3:f7:e9:cf:f6:
1a:66:c3:f5:13:be:07:48:f8:e0:ab:77:f5:56:91:46:2c:da:
31:ff:76:96:eb:4c:67:89:d4:92:e2:cc:84:eb:9c:7b:b6:59:
8a:4c:1f:1a:87:ca:df:45:10:3a:68:17:06:16:a1:cc:6b:e4:
ed:62:ef:31:96:61:25:1e:82:c7:61:fe:0c:3a:34:5c:2b:7c:
c1:9e:7c:7e:75:a7:96:e0:63:c9:ff:02:f8:20:6b:cf:72:13:
6c:9f:4f:0e:0b:3f:22:cf:46:c8:7d:6f:18:4e:42:94:c7:b0:
44:3c:8b:95:80:82:23:8d:bb:c1:b3:08:39:1d:2e:6f:15:1a:
14:96:2e:1e:2a:77:b3:05:d1:2b:87:4f:cd:ac:4b:83:d5:64:
f7:70:d2:61:97:20:91:9e:7d:d2:72:51:a6:03:3e:73:00:4c:
3e:b2:70:71:1b:4d:11:8a:0d:61:bd:3c:25:1f:75:9c:22:1e:
59:03:c3:e6:a8:f1:ac:6b:9c:68:9f:cf:3e:49:17:12:da:77:
dd:be:d2:0a:0c:a6:90:a3:d9:2f:39:5f:e1:0f:53:dc:5c:c1:
5f:ff:89:7f:89:68:90:4d:10:fa:4c:f0:cf:59:51:e9:25:ce:
7d:60:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:59 2025 by rpki-client