Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff2f8ae-f5ea-311c-aa2f-60c47e1fb8a5.roa
File: 1ff2f8ae-f5ea-311c-aa2f-60c47e1fb8a5.roa (raw, json)
Hash identifier: cy4gs5Vb3cQkXaOb/qiRm/HnGsRwn+NvJR5GX9LOPHY=
Subject key identifier: 43:C6:54:10:51:5B:E4:5A:5E:CD:4D:30:96:16:03:58:DF:24:90:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7CB7A049F8BA6ACE63ECF2A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff2f8ae-f5ea-311c-aa2f-60c47e1fb8a5.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:b7:a0:49:f8:ba:6a:ce:63:ec:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=e793d4ab-11c8-4ad0-8ef5-642f2318f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:e4:6f:f2:d1:18:27:f6:a4:24:b5:20:7b:
db:39:13:76:25:08:0a:46:44:ea:47:9a:e5:0a:bd:
38:a0:d2:85:4c:78:8d:0c:b1:42:4d:ee:de:ad:86:
70:7c:c4:52:4e:d4:53:ed:45:40:82:7e:3b:25:08:
e6:6b:01:c0:e9:d6:cd:2d:3e:f4:9d:e8:ce:ef:cd:
4e:9a:89:4a:60:59:1f:9b:27:d1:b2:ed:34:1b:59:
78:aa:30:84:6b:58:ab:8e:19:fa:10:cb:c2:4a:0c:
6a:d7:72:6a:e5:50:fc:3e:bd:55:e6:fc:9d:46:8e:
29:da:db:76:ac:27:c2:a5:47:af:6e:e5:50:c8:d0:
61:56:3d:fc:b5:f6:77:e6:b8:4f:75:8c:9b:f3:02:
0d:82:81:5a:76:b6:80:9e:54:4b:02:79:8f:b6:59:
80:1b:c6:9e:6c:bf:c4:07:e4:ea:85:4f:1f:a5:03:
9b:5e:e3:63:1d:2c:5f:51:69:3e:65:3a:4c:02:25:
5a:5e:f9:c1:13:c8:73:cf:6c:7d:b1:83:17:be:dc:
87:5c:54:7a:a2:20:65:1b:3a:04:3f:97:23:43:23:
be:bf:c3:02:c1:f0:4c:5a:38:ed:c5:06:2a:f4:8f:
9b:39:e4:9a:92:86:dc:2c:43:1a:5a:92:03:fc:86:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:54:10:51:5B:E4:5A:5E:CD:4D:30:96:16:03:58:DF:24:90:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ff2f8ae-f5ea-311c-aa2f-60c47e1fb8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c0:71:c9:c2:75:78:12:3a:91:55:6b:86:ef:b0:86:e1:57:
e0:49:34:5e:57:0a:f0:4e:86:ec:de:8d:c9:23:ad:02:2a:9c:
7b:2d:8e:bf:44:17:41:ac:a5:01:e0:74:34:11:45:d6:cf:c9:
d7:7a:43:32:10:68:05:4e:26:73:2b:b5:91:7c:3d:99:81:14:
b3:88:f5:b8:dc:ce:2b:1f:a2:c9:f8:53:7d:0b:d4:fb:14:ee:
b8:ca:3f:76:27:0d:c2:32:2d:20:4e:57:1b:c5:d0:53:fc:9f:
0b:90:14:a6:eb:2b:0f:fe:5e:98:07:fb:82:76:62:f0:4f:57:
57:78:27:df:c3:fd:da:9e:c1:15:c3:82:60:8a:6c:79:e4:f3:
b0:33:cc:59:0b:3a:03:b5:ba:5c:fa:65:1d:24:79:f4:8c:51:
a7:8f:07:c3:c0:a9:c6:9f:fa:14:b5:1c:fb:39:e3:02:00:aa:
62:41:41:4f:1c:6a:b4:a9:b7:ba:f1:09:f0:f8:b1:44:05:4c:
4a:e9:1a:e7:b1:06:cb:a4:e5:4e:d5:2e:a7:35:51:41:08:58:
99:ac:ba:c5:23:c2:3f:d7:e7:51:bd:87:a9:a9:92:74:94:58:
5d:cd:8f:9f:ee:2a:d2:91:32:09:30:ae:e9:27:64:84:23:c5:
d3:a5:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:39:55 2025 by rpki-client