Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40cf5c6e-cb52-3241-908e-e6ebd94cdabf.roa
File: 40cf5c6e-cb52-3241-908e-e6ebd94cdabf.roa (raw, json)
Hash identifier: uqskA6pfeGtipa3qBcxERfKQsSYiK9Lu85Y5adFnYB0=
Subject key identifier: 41:A1:46:0A:A3:60:F0:EF:41:12:A2:4F:46:38:05:06:23:2C:36:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF1F861968197829065B9ECC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40cf5c6e-cb52-3241-908e-e6ebd94cdabf.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f1:f8:61:96:81:97:82:90:65:b9:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=435fc905-530d-40c1-b5d2-2abe93bd39fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:2e:e4:d9:cb:e4:e7:b5:bd:2a:09:ef:f1:
df:27:8d:b7:99:b7:ff:4d:cb:c4:96:94:82:52:ab:
2b:7a:7a:1b:5c:70:07:20:07:e6:e1:c8:7c:98:53:
a0:f8:f2:57:27:ec:1c:01:af:98:20:52:b1:18:ab:
ab:2b:90:d4:f7:ac:d7:e8:6e:bd:1a:5f:38:73:10:
40:6c:8f:50:95:f7:6e:8f:f0:9e:d8:09:ca:d0:58:
5e:4d:11:a6:b0:cc:8a:0f:90:d3:3d:d4:76:64:69:
20:ee:73:74:05:20:bc:7b:03:06:38:c1:79:c5:c9:
3d:ba:ac:07:72:47:04:59:d9:05:57:5e:0f:6a:8f:
3b:60:35:44:83:74:b6:db:c0:b5:c9:d0:ea:c4:d6:
15:81:fa:bd:56:b0:5a:9d:dd:64:b1:36:d5:14:53:
35:5d:4e:11:fe:2f:41:91:5a:5b:20:1a:e8:2a:11:
0a:74:4c:41:0b:dc:ed:3b:37:39:b2:d2:18:8b:aa:
5b:f9:a9:53:4b:6d:6b:15:ea:22:a5:bb:b3:09:91:
d3:5f:70:37:3f:de:f4:5e:4e:9a:1e:cc:f0:95:8b:
93:e8:f3:4f:b4:3f:e4:7c:4c:05:64:3c:5a:42:6f:
e2:5a:23:88:c2:d2:e8:52:38:33:42:57:ea:3d:9f:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:46:0A:A3:60:F0:EF:41:12:A2:4F:46:38:05:06:23:2C:36:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40cf5c6e-cb52-3241-908e-e6ebd94cdabf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:37:53:17:6a:58:a2:cc:2d:dc:da:a7:8f:a6:74:c7:ea:5e:
27:ad:9e:2f:6b:ac:18:8f:ca:81:b8:98:58:6c:d4:0f:5d:17:
f8:dd:a6:3e:53:a4:3b:00:2d:62:6e:0d:d8:f8:b4:37:b1:a2:
45:99:c0:a1:a5:17:c9:53:aa:38:69:17:ef:2d:7f:35:d7:55:
d0:94:c6:16:fc:e9:bf:9c:24:26:fa:89:8f:67:df:52:e6:b6:
64:b7:d3:5b:bf:ca:8b:78:31:ff:72:71:bf:58:9f:45:68:60:
af:c5:88:6f:05:19:de:2c:66:53:7c:7b:d6:9b:1f:8a:1f:13:
ce:16:86:b1:f0:f5:b7:47:0a:f0:1a:6a:0f:85:4e:da:c8:0b:
fb:b3:7f:b9:d8:12:6b:78:0c:d0:9d:0c:f3:06:ab:08:1c:58:
4e:64:38:4c:8b:8c:3c:a1:19:5f:2c:35:f8:b2:2c:bf:c8:e8:
56:8b:1f:e9:34:84:08:26:8e:f8:da:d6:27:7f:de:61:68:5e:
89:08:0e:8d:1e:e9:b9:d4:ed:25:55:2b:f3:78:46:12:75:4f:
21:f6:68:03:f0:3c:30:f1:52:51:08:4a:45:b5:6e:1c:4d:8c:
e6:f8:38:88:9f:dc:14:6f:5e:f0:42:21:28:5b:f6:84:d6:a6:
32:ad:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:25 2025 by rpki-client