Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33ced068-75d0-3d17-9d70-8b439dee215d.roa
File: 33ced068-75d0-3d17-9d70-8b439dee215d.roa (raw, json)
Hash identifier: 5kxYpU8criphaKWUfWOiVuEbA+3xy+6Va/2lzj/bUy8=
Subject key identifier: 06:67:B1:7A:B2:AC:C3:C4:54:24:85:5A:CC:29:4A:EB:6F:0B:19:F8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF23412296F96CB2183D1BF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33ced068-75d0-3d17-9d70-8b439dee215d.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:34:12:29:6f:96:cb:21:83:d1:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=b81a8968-e6d2-4155-b340-8198d7469225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:9c:bb:4d:66:10:dc:41:01:3c:a4:1e:4f:
ec:82:22:07:7a:79:19:b3:7c:84:75:88:16:7a:39:
e6:be:87:5f:f2:cb:b3:4f:78:60:fb:7d:b6:c4:c1:
60:2c:1f:c9:c3:03:b2:eb:be:ea:c3:7a:da:7a:dc:
80:7e:62:c9:a6:88:12:92:c2:9a:f1:15:4e:7c:c7:
95:65:1d:9e:a8:d7:1e:16:20:51:7b:98:32:3d:d1:
d7:6e:d1:fb:76:2c:09:11:84:85:72:db:f2:d3:44:
51:b6:45:f8:8d:11:06:81:e0:73:72:6b:4c:1b:3d:
e1:1f:51:13:1d:03:eb:0f:0e:f0:84:8c:be:51:ae:
b4:cd:98:76:8a:cf:87:fc:97:24:40:74:54:05:e5:
67:3f:0d:32:88:a1:59:fd:ca:7a:d5:c7:c4:d8:f1:
42:b9:7c:91:ec:03:d4:e7:43:7c:d3:ba:cb:39:ba:
59:6e:e8:0d:9c:b2:8e:7d:33:02:5f:df:85:93:39:
b3:c4:60:45:ee:d6:a6:08:63:cf:22:90:24:ff:d7:
59:5d:94:86:dc:2f:51:ae:e6:f4:26:2c:ae:1b:0c:
d1:a6:c0:de:01:4b:d6:67:b5:18:df:ec:9c:35:3c:
a2:6b:7c:b2:6a:a2:96:ea:14:80:a8:5d:f1:34:47:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:B1:7A:B2:AC:C3:C4:54:24:85:5A:CC:29:4A:EB:6F:0B:19:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33ced068-75d0-3d17-9d70-8b439dee215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1f:27:79:2e:c2:2f:a9:29:33:82:ca:11:d9:ed:ab:f2:b9:
ca:e2:05:42:e1:66:bd:3e:b7:a2:56:6c:f9:63:4c:d6:73:00:
62:ee:c1:00:c2:ba:ba:aa:68:e2:0a:bc:40:92:c9:0f:45:d4:
d9:5e:f9:75:01:87:d4:e6:c9:25:32:e0:dc:ad:d7:da:aa:72:
73:1d:b6:9d:59:5c:06:5e:81:fb:93:57:e2:15:de:09:da:dd:
f2:bf:e1:6d:4d:9e:a4:3c:c6:b4:dd:bd:4e:2d:58:22:52:c9:
65:43:85:aa:2c:36:7c:92:54:14:d3:57:07:0e:48:b7:65:a7:
f1:e5:c1:4c:d9:e6:e0:bc:7c:fd:c2:8e:65:58:7d:3d:4a:3f:
82:4d:7b:9d:cd:1b:75:36:d8:de:64:41:4d:1c:71:5e:b7:65:
93:31:c2:0a:f2:c1:f3:81:5d:c3:7b:9a:e6:f9:39:8a:41:c3:
0f:55:fd:fb:73:53:96:98:81:b0:84:73:4e:23:45:28:3c:11:
e8:94:8b:81:0a:dc:d2:32:e1:42:d8:97:4b:2a:e1:03:e9:61:
ab:94:af:d4:2b:b6:b7:00:2b:44:fd:c0:97:43:6f:f2:7b:c5:
b8:e5:88:07:be:df:a0:92:2a:37:ce:6c:7f:65:df:7e:42:9f:
65:9c:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:06 2025 by rpki-client