Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/394a69de-0849-3002-bb20-77e78714239b.roa
File: 394a69de-0849-3002-bb20-77e78714239b.roa (raw, json)
Hash identifier: iLj049ib6a9qHloktBjeqSZ7UQCGaG3h4MtgJ/t8tMU=
Subject key identifier: 3C:3F:4C:C6:78:A4:64:0E:E2:8E:02:12:BF:5D:CF:EB:AE:2C:AA:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA241DB24E9FB4290B60D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/394a69de-0849-3002-bb20-77e78714239b.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:24:1d:b2:4e:9f:b4:29:0b:60:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=5234212a-0bc7-4be7-92ae-82b5e4a31eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:1f:d3:22:bd:4b:79:0f:6a:35:47:56:1d:
41:13:a9:e8:6b:1d:61:09:46:1b:20:30:00:34:09:
ed:78:a7:80:74:53:ce:30:9c:2e:36:c5:c0:b9:e2:
c1:8f:58:6d:c9:87:e4:85:84:bf:96:b7:2d:6b:39:
67:72:d9:bf:36:03:10:73:92:6f:96:35:18:9e:2f:
4b:c7:d0:21:4e:d4:bf:2c:72:57:16:e4:2a:02:96:
56:85:42:31:d6:7e:22:8c:53:9e:da:72:26:b6:29:
b6:58:73:fe:85:47:a6:2d:a2:93:04:0d:0d:99:eb:
3d:a8:05:71:1d:be:eb:57:fe:c9:6b:75:27:70:57:
84:a4:78:01:0d:a4:a2:81:a2:ab:fe:bc:9a:d0:1b:
39:a7:6b:91:79:07:90:b5:5e:03:34:ba:ec:f2:ea:
a7:1b:39:77:68:88:67:0f:da:b0:ae:12:9b:14:62:
d7:b6:4b:6d:1b:09:76:7e:ca:a5:44:9c:e9:04:74:
40:26:3c:5b:ec:23:46:eb:73:be:72:0c:58:0d:a0:
3c:58:c8:75:d2:95:5b:37:3e:d1:78:67:20:15:5c:
a0:0d:c7:ae:5b:06:43:ee:14:37:78:a6:1b:6b:ba:
fa:6c:2e:19:fe:4d:a2:a9:03:c8:01:e2:9f:47:43:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:4C:C6:78:A4:64:0E:E2:8E:02:12:BF:5D:CF:EB:AE:2C:AA:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/394a69de-0849-3002-bb20-77e78714239b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0f:8f:c1:ca:f4:2b:8a:57:89:1e:d3:5d:cb:71:54:08:2a:
8f:82:2e:45:2f:9d:68:4e:3c:dd:e3:85:d6:f9:c4:ce:07:72:
9f:e4:95:bc:c0:fa:5a:0d:2f:09:9b:ac:8b:c1:97:9f:7c:fc:
6f:e4:d0:52:3d:25:f6:c4:60:98:42:e6:0d:6a:33:03:92:6b:
bb:46:dc:75:b0:c8:1b:1c:5e:3c:26:ee:1b:a0:19:3e:a6:e5:
49:e0:3a:0b:ff:2a:53:d4:63:91:24:a6:11:8e:53:c1:3d:22:
33:58:dd:85:a2:a7:a8:63:62:4f:c3:f9:40:29:46:72:4b:14:
4c:f6:a2:16:8f:b6:34:d5:da:b4:e2:0c:1e:cf:6b:60:56:f5:
88:2c:f7:52:41:0e:4b:84:88:24:33:96:b5:6f:11:d2:eb:9a:
3a:03:24:93:8b:0d:d3:8c:d2:5a:28:7f:91:87:46:12:d7:62:
87:ef:e1:9c:c0:52:38:32:12:23:10:6c:c5:8a:38:7a:6d:09:
a1:53:cd:b6:9d:5d:23:31:9a:20:45:5d:ea:4f:a0:7f:be:da:
82:f7:da:50:0d:8c:b3:d7:21:96:88:23:ad:77:b4:08:ba:18:
50:10:3b:17:9a:46:e3:59:e2:6c:cc:15:b7:21:6e:16:fe:5a:
32:ac:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:57:25 2025 by rpki-client