Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d2b807e-8a09-380e-a44b-a44396f683fa.roa
File: 3d2b807e-8a09-380e-a44b-a44396f683fa.roa (raw, json)
Hash identifier: tsOWQGlZyKwIUJgnWUYEFL+lfAAc2xEI61eR6CGjUP8=
Subject key identifier: 48:75:0D:AE:DA:E9:E2:1D:2A:65:D9:1B:57:75:06:C8:33:08:83:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3969FBC51140AB438FB6280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d2b807e-8a09-380e-a44b-a44396f683fa.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:96:9f:bc:51:14:0a:b4:38:fb:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=0466ee40-bf5a-4283-a3dc-7f924f0a08a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:ba:48:4b:61:65:66:1b:19:7b:ef:e4:12:
37:fb:d9:0c:a7:3e:2d:a6:32:4a:65:58:d6:e7:23:
2b:6d:6f:35:f9:34:99:f1:c8:b0:e0:aa:95:cd:1b:
6b:8c:a5:9d:69:2a:1e:b5:87:58:05:f6:bd:5d:04:
20:0b:11:66:18:4f:53:e5:79:62:a3:09:b9:76:4a:
49:75:a4:87:14:9f:64:dd:a0:2e:a2:49:ac:c5:94:
c6:58:09:d3:28:c3:b7:89:55:de:49:82:6c:d4:c1:
7c:d8:12:42:74:62:7d:35:fe:01:00:3e:2a:ab:7f:
3f:f0:d6:02:0f:6c:ee:d9:89:e3:59:d6:6d:7e:32:
b1:6b:dd:c2:58:4b:9c:5d:2a:66:7a:d3:16:d1:73:
a3:3a:01:7b:a8:1d:fa:20:56:c4:2b:59:2c:d7:e1:
3c:47:a9:94:2d:bc:98:08:d2:ef:b5:21:1b:d1:81:
ed:ce:1f:79:d7:0a:ae:6d:56:1d:5e:02:85:bb:8d:
39:d1:69:ea:96:0a:fe:37:76:0f:c9:62:1e:0d:dd:
c7:8c:a3:b3:d0:6b:4b:bb:a6:bf:d0:0b:c2:56:a8:
72:38:a9:49:ea:bf:dc:db:b7:cf:ec:c1:b6:e7:87:
d8:c2:85:6e:53:0b:a0:70:8a:60:57:24:58:ed:01:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:0D:AE:DA:E9:E2:1D:2A:65:D9:1B:57:75:06:C8:33:08:83:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d2b807e-8a09-380e-a44b-a44396f683fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:52:a5:35:e1:8f:fa:69:b3:31:2f:e8:69:46:46:01:c4:df:
9d:fa:50:33:c9:b2:13:8a:a1:a1:f0:ea:fc:ff:a5:d0:dd:0d:
82:a8:24:09:00:c4:12:32:18:82:fc:51:bf:a6:74:72:85:f7:
11:b4:21:cf:96:bd:39:ca:6a:a1:3f:b0:62:e9:2e:05:16:6e:
67:3d:cd:91:77:10:5c:e4:43:5a:a6:62:c2:76:08:d4:c4:c7:
79:ca:c8:ad:61:12:2c:50:35:ab:d6:16:89:50:0a:9a:28:a5:
53:93:3d:9f:2e:0d:5f:74:c2:fd:53:d0:5e:a5:ba:d6:c8:7e:
d7:8a:59:d7:fe:cf:17:d4:ab:77:72:ee:38:db:33:ee:54:3a:
7e:37:4b:d5:34:35:3f:cf:56:8d:73:1d:89:3e:17:bd:d4:30:
1b:72:01:71:17:bb:43:af:7a:b7:ce:f7:c0:18:26:de:b1:33:
f0:6c:be:13:2f:49:72:47:3d:59:18:81:ff:89:bf:43:8f:c2:
3d:c4:00:6c:22:c8:ef:1a:8b:00:68:4e:df:ab:4d:90:77:89:
4d:75:51:9a:34:3e:e8:8c:f4:a8:89:5b:5f:aa:be:dd:1a:ae:
df:85:a8:a8:46:49:83:23:8a:e4:9d:b9:4d:c0:08:e1:49:d5:
06:c9:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:43 2025 by rpki-client