Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35eab094-d9ad-3ffc-9bfc-fb66703ba21e.roa
File: 35eab094-d9ad-3ffc-9bfc-fb66703ba21e.roa (raw, json)
Hash identifier: mF7GPKsoTyYWhUwEnrHLzW7bWpafXcn9gNQXMFrJS7w=
Subject key identifier: 5A:73:3D:F9:CC:14:0A:65:3E:4D:3F:D3:B3:A5:B4:C5:51:70:2F:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BBD8EA64883D886189B3A640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35eab094-d9ad-3ffc-9bfc-fb66703ba21e.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:d8:ea:64:88:3d:88:61:89:b3:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=ffc9a870-86cc-44aa-a283-35b6fc78fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:e0:f7:3d:bb:06:fa:9e:f7:5f:d6:c1:e5:
73:23:3f:52:4b:fc:ca:f6:2c:b3:2f:69:18:5e:29:
c0:2f:16:62:cc:2b:ec:93:d3:9a:c8:14:84:87:39:
9c:55:de:eb:f1:39:d2:13:62:b7:64:8f:70:1c:8d:
77:f6:72:cd:92:d9:fd:08:63:0e:14:8c:8f:85:94:
18:11:e3:b5:42:47:0f:c0:f2:8a:e5:fd:87:6e:df:
19:7e:7f:4e:62:e6:27:df:3d:bb:39:6a:cf:7a:fa:
97:bf:37:fc:c4:b5:09:f9:f3:9b:cc:11:c5:c2:01:
74:cc:5d:c6:9b:22:ec:f2:0a:79:75:33:90:0c:dd:
56:55:ce:52:35:d6:7a:1a:f6:03:58:3e:4c:5b:b4:
71:62:4c:b8:08:82:d7:13:cb:17:8f:66:90:bf:e5:
c5:61:a6:32:ce:0d:d8:3c:6c:af:d5:3a:e5:5a:cc:
d2:04:4e:ac:9a:31:81:b8:b6:99:65:f4:3c:08:c9:
ae:ac:b1:d5:80:24:51:c4:8d:40:fa:21:d9:6e:8a:
78:72:c6:71:97:e6:d8:92:de:46:7d:a7:07:59:75:
5d:cc:6c:55:85:ce:8b:16:56:44:4f:75:79:e9:47:
99:5c:13:0e:f3:5a:46:cf:b5:fc:07:f3:0f:be:cf:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:3D:F9:CC:14:0A:65:3E:4D:3F:D3:B3:A5:B4:C5:51:70:2F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35eab094-d9ad-3ffc-9bfc-fb66703ba21e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:2c:c3:f2:0c:36:0d:d1:e2:e7:20:95:3d:49:2e:ce:2f:9d:
b6:0c:10:26:40:c2:c9:6c:1a:b9:0c:5c:8b:de:a7:3b:0d:60:
2f:d0:bc:22:7b:12:89:1a:90:ef:31:58:2a:1d:fa:cd:67:82:
c0:32:45:94:5c:c5:57:a1:26:65:58:30:cf:a6:d8:c0:83:53:
ce:cb:28:e9:b5:62:00:e9:a7:5c:06:e7:00:6c:a3:96:af:e2:
3b:72:19:12:08:06:50:75:e7:52:48:9d:97:32:ec:9d:69:1d:
1f:dd:8e:1e:3a:af:17:e4:4d:4e:61:4b:74:73:01:d6:2c:ca:
97:82:f5:81:f9:71:38:bb:98:6a:41:ba:30:9b:94:bf:e7:02:
d2:20:45:cf:38:78:34:43:3e:29:c1:57:c4:ca:e5:45:62:53:
4f:17:74:f4:27:63:0a:43:38:76:00:ce:6b:f0:ec:5e:f9:4c:
91:40:fb:1b:ba:8d:c5:46:e0:ab:c7:68:08:f8:1a:9f:cb:fe:
1f:0b:84:dc:01:7b:36:9c:51:fb:2d:ce:5a:49:7c:a1:29:c6:
ce:ec:d2:77:79:06:e1:a6:c8:6e:92:75:4a:21:7f:b4:43:8a:
f1:78:8a:7b:ec:3d:11:62:3f:44:6a:56:a1:a3:9a:53:d0:12:
e5:23:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:06 2025 by rpki-client