Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3719907d-189d-3ca7-a949-bc6cb0c1b461.roa
File: 3719907d-189d-3ca7-a949-bc6cb0c1b461.roa (raw, json)
Hash identifier: lCbXe/3nXgkhpiKFuU/qBVLGMdN0cRfLiUlabeeRYOs=
Subject key identifier: B6:F7:EE:A5:B2:BF:A3:5C:A8:5C:AD:D0:B8:84:94:D9:DD:59:A3:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF81B7443B89A3902A8DE1000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3719907d-189d-3ca7-a949-bc6cb0c1b461.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:1b:74:43:b8:9a:39:02:a8:de:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=57e914d1-eb79-4b96-a95f-830fa1c18ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:f4:e8:3f:62:e6:9b:2c:c2:e4:51:6b:e0:
52:1a:be:2a:5e:fc:0b:ea:ce:00:38:4a:67:e6:2a:
00:de:e0:3a:b8:47:fd:cb:38:5f:9a:09:76:75:ea:
f0:43:08:37:b4:32:e9:74:61:47:03:ac:a5:21:04:
56:aa:c0:6a:ba:5d:48:cc:7c:32:a3:d5:ff:d5:3a:
27:93:bd:6a:c1:88:f9:3a:2d:bb:ae:9b:04:83:cb:
6c:c8:3b:70:fe:60:38:8a:56:42:35:22:2f:b9:46:
e6:c7:1c:a1:ae:62:3b:4b:50:c2:21:fb:b9:fe:b2:
43:7d:44:a1:aa:83:46:ef:31:af:15:8b:fd:a9:2f:
2c:ae:6f:13:75:70:57:63:7a:6a:21:bb:52:cf:29:
06:65:be:91:bd:22:af:f2:90:a0:be:f0:3a:28:2f:
ea:ee:04:9b:b1:e3:49:23:90:06:45:4f:c9:61:a6:
70:c0:b5:1c:aa:3b:0f:5e:cb:f3:f8:8c:43:4d:c5:
5a:e3:50:af:4c:ed:f6:dd:fe:bc:8b:11:21:07:e6:
8a:ec:4c:bb:04:58:19:3b:36:8e:fb:74:d9:0c:ad:
24:5d:c0:68:68:0b:6f:11:42:fa:90:5b:58:ab:48:
a7:4d:66:5c:97:98:2e:bd:61:c7:fe:f6:40:8f:4f:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:EE:A5:B2:BF:A3:5C:A8:5C:AD:D0:B8:84:94:D9:DD:59:A3:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3719907d-189d-3ca7-a949-bc6cb0c1b461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:86:2e:01:24:ad:e1:85:a5:9f:bb:c0:2d:d7:1a:56:d1:30:
64:fd:fc:5e:18:1d:e3:8d:0e:58:39:42:2a:af:4f:b0:e5:d9:
09:d1:86:4a:dd:7b:43:e6:13:8d:b9:f9:1d:d2:d9:69:95:b1:
11:17:81:74:b7:8c:7b:4e:18:fb:ce:c3:b1:0a:95:8c:25:72:
d9:1a:e5:0c:05:49:74:2c:69:07:c1:f4:de:f4:ed:e4:78:94:
46:01:2b:a4:34:20:ba:a9:d1:38:0c:8f:57:40:b0:a6:9b:8f:
fe:f6:d8:58:9d:f9:3c:65:f4:07:70:87:1b:18:f3:2b:44:ad:
4d:73:3e:d6:c8:63:fa:7f:d2:7a:ab:f7:7c:9e:8d:2b:0f:1c:
04:ca:4c:25:56:55:d6:6c:8d:bf:d0:d2:85:4d:01:81:bf:d4:
c6:4e:73:71:61:fa:fd:73:9d:27:12:e4:d2:ab:9c:91:9f:15:
ec:53:98:90:85:62:77:b8:43:9e:d6:06:61:bc:98:57:d6:a5:
7f:16:20:d1:f0:d9:58:25:81:45:ef:48:28:ce:15:74:56:70:
f6:cc:7e:a7:40:29:d4:16:da:f2:2a:c0:fd:aa:76:8d:18:f1:
e4:66:03:4f:a4:5e:02:1d:e0:60:c7:43:8c:d4:69:41:cf:e7:
57:01:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:35 2025 by rpki-client