Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db4342b-f2c3-3e98-a84e-19b5c70ae7f7.roa
File: 2db4342b-f2c3-3e98-a84e-19b5c70ae7f7.roa (raw, json)
Hash identifier: 6vUG+uETxSdH7Jc/gr4UTlwqHJYoH+I9oSSL+v5NMA8=
Subject key identifier: F3:C0:41:43:E4:4C:16:B8:57:5E:6B:3D:C3:1E:26:62:56:A4:53:10
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2F1A24A42EBF13876F697000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db4342b-f2c3-3e98-a84e-19b5c70ae7f7.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:1a:24:a4:2e:bf:13:87:6f:69:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=49fb37f4-33ed-4da1-9fa6-b63b862e6411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:fa:fe:a9:cb:85:6b:0e:c5:2f:b9:43:b4:
ea:06:0b:ad:4d:3c:96:ce:7f:42:a1:0d:eb:1a:6d:
6c:d8:ca:76:7c:75:7a:4b:99:c8:26:dc:fd:4c:b7:
ce:d4:31:58:3f:b2:eb:bd:94:a8:86:b2:3b:99:d3:
5b:77:b6:92:b4:c7:1b:1a:60:8b:fd:3a:c2:85:6f:
cc:d2:fb:34:17:6c:a2:a4:e2:c0:84:02:fd:e3:0f:
7b:48:5c:b0:fc:99:7b:5f:69:8d:1d:14:5d:75:eb:
66:9c:9a:51:50:1b:e0:62:d6:c5:16:47:65:da:a7:
a0:4c:b8:75:7c:92:b2:90:c4:ce:f2:b1:76:4c:2b:
aa:4b:fb:08:90:57:a2:e7:6c:67:81:8b:c7:39:96:
10:31:5f:64:55:46:44:69:46:f6:99:c3:90:fb:ad:
52:4c:4d:7e:b2:74:f6:ed:8a:0b:f9:e0:d4:7b:fa:
c3:e8:f6:8b:6b:ea:3f:72:ee:81:69:dd:94:06:5b:
ab:8c:b0:dd:18:4c:ed:79:97:94:e9:df:39:39:dc:
42:6e:40:a5:3b:3d:8c:e2:7c:5e:c7:16:13:8b:eb:
a5:86:61:8b:4b:13:e1:dc:52:49:90:b8:1e:2a:88:
4a:92:73:bb:92:21:2e:49:38:9e:cd:8d:bb:25:e7:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:41:43:E4:4C:16:B8:57:5E:6B:3D:C3:1E:26:62:56:A4:53:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db4342b-f2c3-3e98-a84e-19b5c70ae7f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:6d:3d:f3:f2:0b:e5:77:64:df:4d:e8:b1:12:3a:18:69:7a:
0f:2b:d7:f5:db:78:79:07:aa:a3:ea:38:95:7c:43:2f:9f:29:
52:aa:7c:a3:ef:e2:ad:0b:fa:b5:19:b5:b5:f6:8a:b1:85:23:
bb:fa:f9:40:50:0f:8f:bf:a1:e3:35:78:55:ec:78:7d:be:aa:
8e:12:69:ad:98:28:56:23:34:ec:16:7c:e6:47:f4:10:6c:b4:
7f:a1:e0:03:8d:b9:fe:dd:db:88:e8:aa:db:07:b6:0a:cb:61:
95:62:40:26:1f:f6:b4:89:91:44:4a:ab:f5:75:d8:41:99:d9:
99:55:3b:81:f9:e4:c4:e8:73:fb:21:50:99:92:55:16:dc:d3:
67:00:63:7e:a2:0b:39:d9:55:8b:ff:b0:1d:68:5d:77:52:2b:
cd:fd:45:d1:ec:e1:fb:27:cc:eb:95:a0:7b:5b:65:79:87:97:
3c:e0:38:ec:4d:35:17:30:f2:6b:de:d3:68:03:93:55:a7:cf:
33:aa:b5:65:c8:75:7e:d1:cf:e9:f8:43:fb:e1:f0:e7:85:e5:
53:aa:d2:e1:7e:75:9e:c9:3f:e4:a1:01:26:26:23:97:b0:17:
05:02:cf:a3:93:90:8d:8d:65:e9:31:d8:36:91:03:ef:80:3d:
f9:78:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:47:04 2025 by rpki-client