Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/383eaadb-7775-3418-914b-e7c28c7455d1.roa
File: 383eaadb-7775-3418-914b-e7c28c7455d1.roa (raw, json)
Hash identifier: 2hCTmbNXozTV5A2CT5tHWIFqoX/KfRjezQWqLD6K7Wc=
Subject key identifier: 8C:D2:F2:C4:C8:60:62:E0:68:86:03:81:3F:E0:B5:94:CE:8D:9A:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0BB7681E35ADE9145574F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/383eaadb-7775-3418-914b-e7c28c7455d1.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:bb:76:81:e3:5a:de:91:45:57:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=3b09cbc4-3aad-499f-b8d2-2fbe5393c170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:3e:40:58:df:17:90:c3:d3:31:8c:2e:b2:
0c:97:1c:c4:2a:fc:38:ce:89:7c:6b:c5:71:31:a9:
37:ef:3e:66:02:15:08:ee:e7:30:9e:0f:96:80:6f:
83:ec:e8:7b:5b:57:12:b2:8f:7a:d2:43:8d:b9:92:
97:27:da:52:3d:2b:90:91:73:01:74:10:ea:a8:32:
d7:b3:e3:57:70:88:f9:c8:aa:57:5a:df:ce:3d:99:
cd:52:f2:a1:57:b7:bb:4f:bb:07:96:a5:b3:99:14:
d0:3d:5e:9a:3c:a8:1b:43:98:26:09:77:9a:fc:b8:
ef:d8:28:2e:8d:35:85:d5:e4:68:87:90:3e:8d:4f:
76:04:54:a7:47:16:57:1f:bd:73:a8:60:d6:cd:e2:
48:68:bd:ef:d2:0b:ff:9b:72:c9:d0:97:f6:1f:cc:
15:ce:3d:aa:cd:dd:28:60:9c:17:eb:94:a8:eb:74:
ae:4f:1d:bd:7a:65:bb:b2:f8:7b:c3:d5:33:9a:15:
21:92:67:24:fd:3b:5c:48:80:5e:64:66:b5:97:a0:
24:c7:31:80:52:b0:38:67:16:ba:be:27:4a:2f:26:
ec:8e:a3:1a:63:63:9e:e3:57:d6:4f:3a:e8:15:2c:
b7:2a:81:55:3c:40:12:88:7a:44:a6:18:c6:da:1d:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:F2:C4:C8:60:62:E0:68:86:03:81:3F:E0:B5:94:CE:8D:9A:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/383eaadb-7775-3418-914b-e7c28c7455d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2d:4d:b9:a4:98:61:79:9e:1b:7a:a8:90:d4:d7:4b:6b:93:
b5:bd:fd:80:95:bd:a7:39:d1:9c:fb:1b:ee:13:2a:b9:b4:68:
04:3e:2e:29:d0:25:49:f4:1e:af:39:f7:fd:14:70:c5:9b:62:
6c:a9:6f:41:36:02:ef:91:9b:8c:a9:2d:ca:56:28:e1:18:be:
15:a2:91:76:f8:7d:a7:44:45:d9:a9:4b:2a:4b:98:62:ea:e8:
fb:b2:78:a0:9c:bb:7c:e8:cb:72:51:40:7f:66:02:88:8b:0f:
4c:6c:c5:eb:11:1e:78:51:91:61:5d:6c:b7:81:1a:4a:49:9b:
fa:7b:f2:45:1e:df:a9:53:bb:99:b9:5c:9e:a0:2a:80:49:fd:
6e:98:fd:0d:44:f6:9a:86:bc:2a:2b:e1:fe:0d:4b:9a:d1:08:
db:5b:61:95:85:e1:79:76:a9:59:f9:bc:3d:74:4e:82:55:d9:
b8:21:5c:ab:1e:a1:8f:77:bc:7c:42:35:46:69:74:2a:a8:f8:
c8:8a:6c:d1:3e:c9:c5:20:1f:88:0f:84:0c:14:a1:c9:b4:e3:
8b:fa:82:78:57:be:ee:76:6e:b2:ce:76:45:55:3d:9f:bd:5c:
71:a1:2b:d2:46:bd:c3:5d:19:e9:9c:af:a3:03:8d:b3:58:23:
26:ba:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:29 2025 by rpki-client