Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/240e7604-94ee-3fe9-92a8-4c385e1a9c1e.roa
File: 240e7604-94ee-3fe9-92a8-4c385e1a9c1e.roa (raw, json)
Hash identifier: 0fCQLj4ucjHHGiSE5gA21oRytT7q1u/veHztLvcHghg=
Subject key identifier: F5:B5:05:4D:01:FB:4B:0A:D8:23:39:F4:4A:92:D4:16:68:CD:0F:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406799D64736A961E4FF1DFD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/240e7604-94ee-3fe9-92a8-4c385e1a9c1e.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.146.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:99:d6:47:36:a9:61:e4:ff:1d:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=eb9d8d48-4944-425f-b36a-e407d3b843fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:fa:69:d5:af:9a:8b:59:af:ca:27:95:83:
98:49:17:c2:bf:67:f5:f1:20:ba:d7:05:ea:ae:0e:
05:95:62:18:f5:77:59:54:df:b4:33:36:00:a4:a5:
e1:84:93:24:c2:44:e4:70:af:5d:c1:6e:8d:27:08:
42:65:24:15:b2:45:9f:e4:9f:79:4c:de:3d:ce:df:
ee:c2:81:a7:df:94:ec:ee:68:af:49:8d:1c:82:bd:
15:02:d8:64:75:33:69:6b:83:de:d3:22:7a:ad:b2:
87:2c:c8:65:e0:dd:c7:4d:a9:a2:76:32:d3:9d:6d:
15:dc:4b:f2:7f:8d:5c:4d:ac:b2:e3:7e:2d:e8:0c:
d1:0d:04:f0:47:8d:da:bb:b5:4a:82:bd:cf:07:50:
79:5e:47:4e:40:61:44:9a:a8:39:27:07:2f:98:a9:
a1:f4:c6:ce:b5:8f:7a:87:6c:1c:5a:f5:22:f8:98:
52:01:27:30:23:5f:38:14:3e:c6:22:d6:05:aa:49:
c6:27:0f:9e:47:33:b7:9e:aa:7b:46:54:bf:3f:02:
9e:6b:7b:56:65:68:3a:00:ea:4b:94:72:e0:f0:82:
2f:41:59:ed:b9:f1:a3:0f:c9:aa:3b:3a:47:70:fe:
0d:f4:54:dc:ad:7d:6c:13:f1:1a:ac:c8:d1:34:a9:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:05:4D:01:FB:4B:0A:D8:23:39:F4:4A:92:D4:16:68:CD:0F:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/240e7604-94ee-3fe9-92a8-4c385e1a9c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.146.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:49:84:ee:76:37:1e:31:bb:ec:d2:20:4f:80:7b:86:44:20:
01:eb:0a:56:a7:cc:e2:03:16:bb:2d:64:6a:b6:c7:da:55:61:
dc:0e:16:08:da:b1:91:f1:88:29:7c:c6:ba:16:2f:16:0f:1a:
1f:38:61:dd:00:c8:c8:c7:f5:14:81:e9:32:c7:a2:3e:9d:7e:
5f:48:80:a2:ca:10:fb:ed:e5:42:f4:9c:0f:0a:13:24:9a:b0:
b5:e6:74:8f:b7:77:ce:fa:51:19:b3:79:d5:cf:6a:85:a5:79:
5b:0b:3a:1e:62:90:5a:48:a0:b1:ed:b5:02:7e:1e:87:a9:55:
8f:5d:87:fe:ae:b4:3c:98:15:bd:92:af:17:87:f6:96:d7:b2:
4f:31:0a:52:d4:d4:5e:ed:0e:21:46:ca:60:9a:eb:76:30:47:
ba:30:25:97:95:97:9c:d3:d7:87:2a:99:8d:f6:5a:f6:ff:e9:
97:30:3d:f3:b0:6f:2d:c7:d9:fe:b1:50:ab:69:57:d4:14:39:
2d:a6:cb:e2:c9:45:c2:f0:95:8c:b5:a5:2f:93:e7:ce:42:3a:
42:b3:35:b1:b0:3b:df:cf:2b:bb:dd:26:10:dc:8f:83:c5:6c:
b6:2b:c6:42:2b:b3:50:73:b5:89:03:1f:62:32:db:58:48:cf:
e3:ad:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:32 2025 by rpki-client