Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5a38c9-6937-345b-bea5-680be8a19105.roa
File: 1f5a38c9-6937-345b-bea5-680be8a19105.roa (raw, json)
Hash identifier: TzMeS+8GtJG24/PK4V4i/RgJAKv3+Y2LfmXnUpT666k=
Subject key identifier: 0F:A0:EC:EE:DA:9D:8A:6B:D8:29:05:67:D5:45:62:F2:F7:D9:BC:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404172B0F060B5D46D16824A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5a38c9-6937-345b-bea5-680be8a19105.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:72:b0:f0:60:b5:d4:6d:16:82:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=e818a47d-9136-4917-a315-af8958c1a541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:44:83:1c:81:d5:2f:00:cc:fc:51:27:a0:
15:85:63:85:9d:77:57:b5:7f:da:1e:fb:3d:55:27:
28:82:6d:c2:e9:23:cd:e3:76:dd:d0:9e:68:a2:30:
dc:9c:71:ff:2c:09:4f:32:14:79:ac:44:52:fd:c1:
1f:d1:7e:21:1f:dd:4c:5a:fa:c0:c2:07:4d:7a:2b:
b8:ad:6d:e8:a1:2c:2a:ac:7d:f9:58:04:c9:40:b2:
8c:ec:91:d9:14:40:d2:66:3c:c8:b4:06:44:e1:0a:
ec:63:79:6d:cb:27:78:91:e7:29:2f:0f:28:e6:c7:
77:8d:e4:47:64:ef:da:a1:cc:49:41:98:7c:69:f9:
a8:0a:99:e5:d2:43:46:21:42:f3:d0:a1:1d:38:4e:
81:93:32:9a:f6:25:57:2f:6b:5e:c3:69:45:5c:87:
70:09:25:ae:ee:fc:78:bf:f6:d4:03:65:1a:5c:35:
f5:3d:8e:9b:de:98:4e:4a:c7:3c:46:49:a4:e2:e1:
f4:67:19:3e:a3:7b:b7:c7:e8:24:0d:a6:9f:0d:af:
36:2e:60:15:d3:df:49:99:33:20:cc:8b:9e:6f:17:
40:7a:c5:df:21:f6:08:2c:e0:29:7d:27:3f:98:d1:
0b:79:17:6f:5b:73:33:0f:38:df:f6:95:32:64:c0:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:EC:EE:DA:9D:8A:6B:D8:29:05:67:D5:45:62:F2:F7:D9:BC:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5a38c9-6937-345b-bea5-680be8a19105.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:31:50:fa:4b:35:33:48:ca:03:5a:dd:f9:8f:6c:1e:9f:e8:
19:f6:3e:01:a1:c1:e3:71:54:d4:6b:58:76:81:8c:12:8f:84:
32:a0:31:6a:5e:57:67:63:5d:fd:42:8b:49:e0:7a:4c:49:80:
7b:d2:8d:80:ac:b3:bd:08:56:7c:53:d7:25:94:ec:0c:57:2f:
4a:f6:11:69:3c:34:5c:5f:85:0c:67:94:a3:1c:b9:a3:2b:75:
78:77:3d:67:c6:fc:92:ed:3b:38:17:ae:82:35:5a:0d:59:2b:
35:c3:43:c3:55:56:74:1a:35:37:bb:6b:b2:f8:1f:b1:2f:fb:
f7:a6:18:d3:24:b6:bd:94:ea:05:96:9e:49:0b:03:66:bb:d2:
86:cf:dc:d5:35:53:ad:bc:86:4f:1a:4b:c9:d6:ad:ad:de:c4:
fd:e1:4d:19:06:d2:ec:18:75:be:14:1b:19:43:70:9c:1e:8e:
24:7c:74:a1:1e:ad:c6:f1:e8:0f:fc:a0:89:3f:8e:4e:b9:1c:
65:29:c4:9a:cf:11:b1:3a:8e:f6:16:97:b8:bb:d9:7a:9c:b5:
f7:f4:3f:25:d9:2a:59:4b:36:15:c1:7f:71:16:97:34:1a:1e:
74:0a:43:60:ee:42:dd:6b:f1:c1:af:2e:f7:20:b5:ad:73:58:
5b:3f:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:58 2025 by rpki-client