Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39db59d3-0ad9-3820-a3cb-a2e960ab29dc.roa
File: 39db59d3-0ad9-3820-a3cb-a2e960ab29dc.roa (raw, json)
Hash identifier: iUX0np3c++4gkfTK9pStlVOVw8b7BSD5CFozJHdW/Zc=
Subject key identifier: 2D:36:65:01:0C:6A:2A:2F:D8:0D:99:64:F3:AE:48:07:1C:37:13:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB70B27A233561AFE785AC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39db59d3-0ad9-3820-a3cb-a2e960ab29dc.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.80.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:70:b2:7a:23:35:61:af:e7:85:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=b121f49f-574e-40cc-96ea-b6e640c4eb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:07:73:2e:79:0e:29:e3:d1:c1:92:c2:61:
d5:18:d2:43:85:4d:65:43:9b:62:d4:69:b0:b9:94:
5c:7c:c2:b9:c6:24:6f:2d:80:4b:61:7f:19:e5:26:
5e:2c:87:97:bb:a9:53:c3:cc:0f:3c:26:ba:22:97:
e7:38:67:90:85:b3:0e:76:89:40:1f:f7:5f:c0:8e:
f2:5d:33:ef:7d:29:c5:26:32:f0:47:85:5b:38:ca:
57:f9:51:fc:df:a0:8e:85:9c:61:a5:4f:09:1d:27:
b4:08:45:c5:bd:5b:23:22:09:89:4b:07:63:d8:67:
8a:bb:cf:23:2b:df:39:36:4d:b9:e4:93:29:65:ba:
5b:58:41:a9:bf:8e:6e:f9:f0:72:36:4f:bc:ac:6a:
3f:20:f4:4c:27:3d:f0:45:af:6a:a0:e6:67:2d:39:
e4:4c:b2:b5:0d:5c:57:e9:01:0b:4f:eb:c5:60:3b:
82:b1:5c:12:47:83:0e:14:ae:8f:f4:d1:0e:c9:8c:
14:a2:fc:3e:42:b6:2b:45:5f:9c:55:1a:0e:ac:88:
7c:d4:64:37:2b:bd:02:57:66:e1:7b:0c:47:14:94:
9f:1e:96:66:3c:52:ca:5b:f1:ac:02:8c:e4:20:f3:
42:8d:54:ee:6b:b3:17:00:1b:9c:8b:78:2d:49:98:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:65:01:0C:6A:2A:2F:D8:0D:99:64:F3:AE:48:07:1C:37:13:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39db59d3-0ad9-3820-a3cb-a2e960ab29dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.80.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:96:a0:3c:06:a0:9f:96:0a:f9:c1:e1:9d:2b:bd:9d:a1:c9:
82:6a:f6:4f:7e:72:fa:6e:f3:09:c8:ff:17:c5:96:68:41:59:
a9:45:a4:33:21:31:ee:f4:c8:89:77:72:c9:af:06:be:31:92:
74:6a:38:15:22:6f:22:5d:79:bf:83:25:a3:42:d9:6e:c0:32:
c4:80:03:4c:a9:1f:1d:3e:b6:2d:0a:fb:26:1d:94:fd:c7:1b:
c0:3c:b7:c6:c3:e8:f4:7e:df:1d:da:f8:cd:8c:f7:a7:59:ff:
18:d7:60:e0:b2:a1:2d:fb:c4:00:58:da:f9:b7:30:1c:a7:9d:
39:fb:a9:ca:7c:23:e7:b2:32:25:31:c2:ea:12:3f:c1:95:f1:
c7:2b:27:85:9f:dd:63:74:03:3f:0c:1c:63:77:a3:b1:04:0d:
c6:e2:79:f5:d5:c8:f8:20:36:05:d6:0f:8d:d2:4a:25:7d:21:
6b:fe:50:ac:96:f9:0d:c2:90:ef:b3:7c:43:ea:99:e4:a4:68:
95:e3:c8:04:5c:65:35:9f:f3:c4:28:e0:fe:61:52:39:7f:20:
0e:58:7a:0b:2b:b3:6d:ac:ec:52:3a:de:ac:57:dc:20:0c:02:
32:4c:87:d0:72:53:02:57:41:eb:e7:c7:e9:a2:86:03:a8:88:
9a:ae:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:31 2025 by rpki-client