Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb62b20-f32d-3b4f-b5cf-13e3d13ed590.roa
File: 1fb62b20-f32d-3b4f-b5cf-13e3d13ed590.roa (raw, json)
Hash identifier: z7QRKqNmYl9Q9tXjeNR0Ng4IZARxCkg/qClPQrt37wg=
Subject key identifier: FD:AB:60:EF:BD:45:BB:B5:0A:82:67:2E:AA:85:CD:2D:DC:41:F8:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F91C30CA048BE6A8AB33D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb62b20-f32d-3b4f-b5cf-13e3d13ed590.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.104.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:91:c3:0c:a0:48:be:6a:8a:b3:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=5abd3ebd-b74f-4c5f-8d5a-23520ec6859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:dd:47:4d:0b:4f:f1:bb:8c:a2:97:7c:32:
a7:1e:cf:71:db:74:45:27:c0:2a:5c:a8:80:1f:f9:
49:16:c3:4b:3f:59:a0:36:ff:0a:9f:97:16:2a:a8:
9d:a4:f9:42:a2:87:f4:7a:65:70:57:51:b8:97:f7:
22:18:b9:eb:65:76:37:bb:68:d6:d5:c5:52:29:90:
71:99:72:91:8d:b3:2e:12:ca:e9:86:d1:b1:cb:ac:
bc:52:92:d0:4c:12:96:d9:3c:aa:ce:a8:ec:1c:88:
69:c4:fb:e4:72:df:37:3d:15:2e:67:be:5f:7a:7b:
bb:75:8e:97:bc:54:5f:2f:14:62:49:a4:20:a2:7e:
84:e2:ab:20:63:2c:58:b5:34:09:81:8b:68:46:4a:
ed:c3:9c:58:00:b5:78:c2:10:5a:55:d1:90:5a:d0:
18:2c:74:5d:05:cc:1d:43:f8:a8:db:34:ab:87:5f:
7b:f6:37:ab:90:0b:29:ae:6c:e0:15:e3:74:4d:30:
d7:80:f2:3d:8e:81:e7:e9:13:b2:46:29:74:0e:41:
d7:9e:e1:27:2f:5d:a8:64:0a:6c:ad:e9:e7:be:4d:
02:d6:85:0b:be:73:b4:ac:a8:45:a9:ab:0e:ed:cc:
ce:f2:64:b3:25:77:e0:78:a6:8e:31:1f:02:ee:08:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AB:60:EF:BD:45:BB:B5:0A:82:67:2E:AA:85:CD:2D:DC:41:F8:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb62b20-f32d-3b4f-b5cf-13e3d13ed590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.104.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d8:1f:bf:45:27:9a:dc:c2:29:d2:76:81:ef:2d:97:f4:65:
79:4b:6d:a7:c6:69:d5:13:fb:9c:36:d4:72:c0:d3:78:65:7e:
94:64:a2:c0:e2:7e:9d:9e:96:3d:54:59:56:d8:e2:aa:0b:76:
5a:04:fb:3a:34:a9:3e:14:ff:d2:d6:00:2a:c9:59:28:2c:cd:
b0:04:89:3e:9c:c7:42:9f:ee:6f:ab:91:fd:44:07:9d:90:41:
40:1f:3a:f4:e0:32:e9:ab:0f:09:46:6a:2c:d4:ca:c8:8c:e4:
8f:e4:68:a6:0c:95:46:2e:b6:ac:a4:a9:f3:fe:e2:f9:54:dc:
9e:4b:16:c4:55:05:de:5d:a6:a4:f1:6b:71:13:c2:7b:21:6d:
30:ca:4e:7c:3e:0f:cd:37:a1:27:8d:19:42:26:5e:7d:b1:c0:
d0:17:62:3a:a5:58:09:eb:1a:e6:68:10:e4:b8:be:de:9c:12:
0f:92:d2:50:0c:4d:ee:12:d7:0c:65:43:0c:58:f5:15:24:40:
0b:2f:b3:75:64:55:ce:cf:5c:7d:85:56:65:ae:45:f7:5c:4a:
45:0d:da:96:29:5e:cb:80:ae:1b:71:53:1f:73:fa:f3:1d:76:
d9:54:57:f3:08:38:e4:62:60:2d:df:7d:dc:59:53:62:0f:7a:
30:6f:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:54 2025 by rpki-client