Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29bd443b-84d7-374a-9d73-21f0d8c82366.roa
File: 29bd443b-84d7-374a-9d73-21f0d8c82366.roa (raw, json)
Hash identifier: euAmHOgdnyJ9CdeDzDhAP/NpFvfPEqsdPVuSLhQk0gQ=
Subject key identifier: 0D:C6:A8:23:55:AF:07:5D:7C:30:DC:22:8F:B8:56:ED:F0:54:CB:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD070ACCC10F362776A2A0E70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29bd443b-84d7-374a-9d73-21f0d8c82366.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:70:ac:cc:10:f3:62:77:6a:2a:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=cf8d1941-6936-43fb-a8ab-0205fb076d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:53:45:89:31:31:6f:a0:67:a0:39:45:32:
1b:b9:56:ca:5b:83:63:69:f0:42:1c:6c:d2:cc:9a:
b3:8c:40:cd:06:e9:94:b8:2f:39:c9:96:0c:d2:6c:
4e:08:01:1f:94:ec:72:14:9b:4f:c7:92:ce:39:77:
68:fa:fa:e5:12:44:e4:db:6b:49:07:c1:dc:a0:c6:
f7:95:3b:7c:24:e8:b0:33:f2:41:b0:26:ee:2b:e8:
44:51:be:16:fc:2a:4f:b8:ff:c5:8d:e8:28:bd:c6:
fb:19:8d:aa:c2:4e:58:fa:10:a1:e7:93:1a:25:37:
e9:a4:fd:16:85:96:d6:8d:27:b4:68:b6:7b:66:d6:
3b:fd:cb:6b:bb:17:22:8c:cf:6b:44:a6:ad:df:ed:
7e:15:34:10:10:9e:6f:78:8d:35:8f:df:05:ac:bc:
9e:62:d3:90:59:f2:a7:d4:a3:46:b2:ea:4f:25:0a:
94:57:a8:c6:11:4c:c1:ca:d6:cd:5e:17:31:bb:82:
db:81:b1:7c:fb:3d:03:0c:3c:f7:36:4b:d4:14:7c:
8c:88:b9:f5:dd:72:a8:42:67:45:23:58:a2:48:6c:
2d:c6:31:be:8b:a7:7e:da:a5:36:c7:cf:65:8a:55:
5b:e2:e1:2a:a2:7b:fe:4a:05:ea:fb:82:9b:77:ee:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:A8:23:55:AF:07:5D:7C:30:DC:22:8F:B8:56:ED:F0:54:CB:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29bd443b-84d7-374a-9d73-21f0d8c82366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:9b:a4:34:f6:12:1d:a9:41:be:ab:65:43:a8:e1:a4:a2:54:
02:a6:ea:26:9b:ba:1f:86:5f:83:a2:ec:72:66:06:ae:44:4d:
22:87:61:0d:61:23:72:e7:80:5f:f9:8f:e8:09:d3:8e:6c:db:
15:28:89:9b:fd:a7:51:00:bb:a7:c2:95:ad:ee:1b:7d:53:aa:
00:8e:d3:5c:a6:93:a5:e8:94:42:83:02:4d:87:24:07:ab:92:
11:a7:bb:2d:90:00:36:58:ea:83:59:cf:67:45:e5:49:48:63:
ff:72:5e:21:cb:ad:91:db:87:63:ac:66:ad:9a:36:0f:2f:40:
8b:4b:38:dc:2a:d3:f0:34:fe:a8:c3:1d:e5:b4:98:9a:d5:17:
1f:05:e6:63:78:4a:72:d4:82:5b:28:05:30:ce:ba:fb:81:a4:
8d:dd:a0:b3:71:cd:9b:c2:19:9e:41:a8:b5:45:cb:f8:11:c4:
da:34:fc:b1:e4:21:d3:f3:b4:3d:f9:fd:7e:47:d3:75:41:61:
a8:6e:a9:86:6a:c4:7d:37:ff:9e:7a:f4:14:03:9e:39:0d:4e:
95:7b:1c:89:c6:6b:53:39:db:c5:47:2e:e9:14:19:da:5a:b9:
8c:72:84:10:6a:3b:3d:4a:a1:0c:19:78:e9:cb:75:00:22:fd:
ac:12:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:32 2025 by rpki-client