Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fa59c76-3712-359e-93d7-206e7dd70e1f.roa
File: 3fa59c76-3712-359e-93d7-206e7dd70e1f.roa (raw, json)
Hash identifier: cq6P2RuSWU/wlNfRBQYkgjnuT7E7ibqQith3imPozVk=
Subject key identifier: DB:2F:AD:D7:66:E1:3D:6D:F2:CF:E4:8D:79:3D:34:BF:9C:C4:07:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CB0B5A36E5E69B244D5C000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fa59c76-3712-359e-93d7-206e7dd70e1f.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:b0:b5:a3:6e:5e:69:b2:44:d5:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=64f8884d-e308-449f-8b01-8a304d85f453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:56:be:db:2c:63:58:61:da:0a:04:31:55:
ea:f1:5a:be:9e:08:95:ac:bf:ff:24:09:f1:20:86:
0f:1b:90:22:7c:c4:e7:45:de:66:60:59:e2:d9:ea:
cc:00:c0:0e:03:23:5b:58:0a:34:41:87:e2:a7:0a:
ef:f2:c0:0c:c3:db:70:9d:41:a0:3b:bc:9d:f5:24:
03:71:3b:e5:71:9d:04:b4:ca:12:66:de:3a:40:df:
ce:e0:19:8f:7a:cc:35:47:5b:e6:20:28:70:4b:ca:
7d:4b:65:bc:0f:cb:58:a0:f1:89:39:af:a0:86:83:
25:bd:f5:40:cb:92:be:e2:f1:ab:3a:36:08:b6:d8:
a5:f9:b4:93:c2:33:43:d3:b0:90:60:7a:dc:89:56:
f1:f7:1c:2e:81:ac:fe:88:48:6b:5c:53:b0:82:54:
60:e6:47:eb:2d:94:a5:c8:e8:92:27:cc:d6:3b:ac:
f8:e5:38:6c:94:f8:4a:60:61:2f:bd:9b:ae:73:f3:
3d:af:e0:0f:c0:d9:11:3d:40:fc:76:45:25:95:44:
36:22:4f:f9:78:b9:4a:69:c8:e9:55:ea:41:fa:8f:
5e:66:6a:b7:f4:5e:d4:33:9a:8e:41:6a:f8:5a:02:
61:65:7c:ba:23:ba:6e:35:a1:79:57:2f:f5:40:97:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:AD:D7:66:E1:3D:6D:F2:CF:E4:8D:79:3D:34:BF:9C:C4:07:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fa59c76-3712-359e-93d7-206e7dd70e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4f:43:40:7c:96:45:41:1d:c2:f3:4b:0c:f9:1c:35:6c:81:
fe:25:81:f5:dc:7e:94:7b:26:ce:35:3b:2b:e3:13:d4:ff:58:
26:5a:09:d7:9e:ab:51:94:dd:0a:ff:31:f8:b7:0f:d9:8d:bf:
0f:1a:13:71:9d:f4:32:44:16:03:e5:e5:cc:a3:c9:3b:2e:8b:
5f:63:41:67:f9:16:2e:b5:3b:7b:a7:d0:b1:8e:18:5d:4a:4c:
9c:b2:ae:f3:3f:1e:40:2c:1d:3b:a3:71:52:d6:88:99:b4:c5:
9f:df:8d:c9:23:46:46:1e:3d:88:98:51:b2:7a:05:38:c0:50:
d3:26:6d:41:06:e2:08:70:5e:17:c2:e4:bc:0b:a6:89:91:6c:
92:ba:e3:cd:ab:2f:81:fa:c6:cd:76:ed:9d:bc:d5:cf:d0:65:
1d:bc:1f:b1:2f:3c:24:5a:6a:b2:77:54:79:c8:f3:b8:1a:64:
58:4c:1d:41:ab:e4:f4:fb:b9:b0:36:9d:88:47:19:01:9c:e8:
c4:88:2e:5c:8e:5c:8c:f5:4d:cc:7a:e4:37:31:e7:51:c8:d7:
97:69:9a:ee:4b:0b:2c:e1:4e:ae:8e:74:66:00:6f:3e:89:58:
a4:9f:ac:d5:6e:48:0d:ca:8e:e2:a4:a1:4b:0b:fc:7e:62:ec:
85:e9:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:17 2025 by rpki-client