Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/304f3a1d-d493-3176-9694-2eee3d10aca8.roa
File: 304f3a1d-d493-3176-9694-2eee3d10aca8.roa (raw, json)
Hash identifier: 3/D6b2TO/CPrTQrJEkstZQAGt/NpYy+RDfp0/+hQ2nk=
Subject key identifier: 37:FC:45:F5:C6:7C:F4:A4:F1:C5:2B:61:A0:97:FB:2C:F1:86:59:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3447117B34073710BEB59580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/304f3a1d-d493-3176-9694-2eee3d10aca8.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:47:11:7b:34:07:37:10:be:b5:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=5db3c9f3-04e8-4108-92cf-01b2fbda3e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:45:85:eb:e0:9e:75:a5:c8:05:72:f4:9b:
ef:a2:73:c9:d9:b1:dc:38:a0:2e:ca:99:61:66:e9:
44:6a:36:89:87:67:e4:87:50:5d:48:6d:9c:5b:1a:
7b:09:ac:c7:c8:52:c2:aa:75:4d:44:27:e7:ae:2f:
e1:44:ea:ce:1e:4d:6e:94:96:b1:e3:35:cb:c6:ae:
81:c0:fe:70:5b:43:d1:cc:40:b7:0e:95:46:37:c9:
5b:48:e5:b3:66:3c:0a:ef:b5:3a:81:bb:81:ac:81:
9d:88:a0:e6:15:0f:a8:59:13:89:01:18:6c:c0:9d:
d4:b5:80:68:37:fa:d5:b4:86:6b:e9:db:d1:2f:14:
b2:46:84:44:76:a2:2f:29:e5:d9:2f:90:29:8a:e4:
70:fd:6b:41:2d:6a:91:11:b8:45:92:65:ee:c2:c4:
76:5f:8a:0c:c8:2a:d4:70:e9:98:09:80:a5:76:71:
4c:4b:66:08:c0:b6:f9:7c:ff:51:ed:77:33:d1:f8:
a4:78:b6:f6:a1:24:0d:f5:8c:e0:80:71:1f:f4:ea:
7e:63:43:da:65:a3:a5:58:3e:1c:e4:c5:ca:3b:d0:
7d:ed:65:96:30:e5:b4:bd:dc:45:2f:b8:00:d6:14:
4b:c6:c3:e0:a3:28:e5:3f:6a:df:b0:e5:03:71:58:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:45:F5:C6:7C:F4:A4:F1:C5:2B:61:A0:97:FB:2C:F1:86:59:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/304f3a1d-d493-3176-9694-2eee3d10aca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7c:bf:65:db:50:43:51:c9:3c:27:df:c2:81:c5:6b:9d:c4:
ce:6d:ec:c0:85:e0:91:00:79:25:7a:89:b0:6b:c8:4d:18:d9:
ee:48:4d:0d:b6:d6:c3:86:05:a6:81:44:24:7c:01:e5:2a:02:
11:c4:e5:32:b4:43:09:9b:ee:12:37:74:40:91:82:c8:02:2b:
f9:d1:15:17:bc:7e:01:72:53:40:ea:51:d1:9f:55:ab:a7:6f:
3a:6d:47:43:24:54:b0:0c:82:ef:1e:a6:91:a5:39:69:ea:86:
15:5a:e8:7f:08:be:07:13:3d:b1:02:88:89:db:5a:a3:2b:37:
6a:0d:7b:5c:14:02:81:11:5b:79:83:65:bb:72:92:af:03:82:
24:6e:d6:13:f5:14:40:7d:a4:75:2b:eb:62:0b:6d:52:80:9b:
6b:46:01:3d:0b:46:a0:4c:35:d8:fd:99:36:b3:5d:16:24:64:
96:7c:9e:57:b2:c2:fa:98:1a:5b:41:72:25:14:d8:5c:6e:51:
d9:2b:ab:d8:35:d2:08:3a:48:8a:c6:fd:4a:b3:5e:f3:8f:08:
00:5c:64:9b:6c:94:fa:e0:cd:7d:84:b9:d2:9e:1f:65:ad:69:
52:e3:8f:8d:f9:1d:12:d2:7b:f3:37:e4:ec:c9:e5:62:54:dd:
1f:8c:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:55 2025 by rpki-client