Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2303329d-90ea-3893-8ea5-283df88066fc.roa
File: 2303329d-90ea-3893-8ea5-283df88066fc.roa (raw, json)
Hash identifier: l8OVk3iTt3V8yBpSYhNiFrMTVXF+2XS16KmORjPJbQ8=
Subject key identifier: A7:79:CB:21:13:F3:2B:7A:03:0E:7B:0E:BF:0E:5B:11:77:C2:D5:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EEDECB84C3F4AEB0E381180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2303329d-90ea-3893-8ea5-283df88066fc.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:ed:ec:b8:4c:3f:4a:eb:0e:38:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=a39f1e56-23f3-4c75-add0-fed786a34e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:1f:1c:7c:04:ec:94:f5:74:6b:84:9e:7d:
30:93:1a:bf:76:6b:7d:12:54:fd:0c:12:13:b4:dd:
bc:86:d5:de:78:55:0c:fa:b1:07:b0:d1:f8:ed:b9:
9d:29:b7:9c:34:e9:32:66:4c:fb:a7:75:80:27:21:
ce:17:27:4d:9b:7f:7b:c2:61:e0:06:d8:ae:fb:02:
6b:a1:8a:9f:e1:7a:89:82:e1:ae:e8:5e:9b:4c:33:
0d:6e:46:c2:ae:66:18:7a:e3:0f:2e:1c:90:09:c1:
ca:71:f4:25:83:2b:91:89:b0:8a:12:11:df:f0:90:
f0:06:02:a7:a2:b2:85:04:f1:ba:5c:bb:6a:1d:b0:
19:ce:17:4c:45:01:75:de:2a:9d:9c:8b:39:ac:43:
4b:5b:df:fb:16:c1:ea:ad:00:8f:12:ba:d3:4e:1b:
72:87:55:3c:1d:d1:1c:61:0e:59:67:40:e9:3e:5b:
9f:04:e3:60:f2:78:5e:77:c6:28:b2:04:b2:59:3b:
e4:db:15:a2:69:78:10:9e:c8:9b:9e:3a:ad:81:93:
82:6e:5d:45:87:20:0f:b8:5e:be:07:2f:f4:2f:bd:
c3:58:0e:eb:5b:80:ad:33:c8:89:60:4c:d2:07:d3:
48:f7:5c:ca:0b:a0:5d:73:6b:3c:7e:3c:df:9c:55:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:CB:21:13:F3:2B:7A:03:0E:7B:0E:BF:0E:5B:11:77:C2:D5:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2303329d-90ea-3893-8ea5-283df88066fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:27:57:2d:2a:7d:3f:af:73:83:3a:9b:35:57:43:4e:08:c1:
d6:32:a0:2f:1d:72:53:cb:f9:bf:b9:f3:5b:b0:ba:b3:b4:6f:
25:76:07:d3:95:df:48:01:ae:c5:97:c3:7a:68:5f:f4:dd:c7:
f6:5b:e5:cd:b7:51:2e:26:6b:52:dc:0d:34:84:4f:c8:03:a9:
a9:63:35:d7:92:74:3f:b7:41:41:96:34:ec:95:b4:2f:af:59:
93:11:dd:03:0f:5d:85:33:f9:a8:a7:d5:92:cf:85:51:37:b9:
a9:09:a7:44:3a:36:83:ff:90:2b:26:bb:62:b4:19:b5:c6:df:
1a:c1:42:8a:67:80:e9:23:51:b4:bf:a6:28:97:f8:50:bc:58:
f3:0b:82:da:1e:70:e3:4a:5c:62:6c:b6:f8:41:9f:e0:8a:ca:
94:3a:1d:b6:72:b5:23:d7:fe:b4:db:8e:30:53:6b:01:fc:7e:
97:c5:ec:3c:ca:27:bf:bb:0a:5e:aa:5e:b9:55:af:14:10:7c:
9c:97:07:3c:6e:da:0c:fc:12:3f:a6:a9:a4:ae:72:fd:ec:80:
95:47:75:55:a5:98:49:e9:2e:fb:ff:b5:a4:d6:dc:d6:b0:a9:
01:09:b2:21:13:65:9b:3b:39:d7:44:b4:f5:d5:17:66:81:7e:
88:13:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:50:33 2025 by rpki-client