Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40db2b67-4193-37e9-838c-7c54c5af9ec4.roa
File: 40db2b67-4193-37e9-838c-7c54c5af9ec4.roa (raw, json)
Hash identifier: 9402xb4cY/xJ0liNI3TYQFbrMgnUha/IOjtPl88Ao0w=
Subject key identifier: E4:FE:E1:0B:20:00:76:36:72:2D:17:54:FE:34:60:EC:6D:73:BF:50
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD15F0E47F7C946A09FDD8A20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40db2b67-4193-37e9-838c-7c54c5af9ec4.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:5f:0e:47:f7:c9:46:a0:9f:dd:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=b19d5577-110d-4a55-8a0c-e52e10e1bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:ed:70:61:25:56:42:1d:38:d8:56:8a:8d:
49:22:9c:e7:93:c0:70:a9:df:0d:a4:76:fb:94:ff:
02:d7:60:d4:60:ba:3d:a7:31:a5:a8:97:c0:ea:1f:
53:88:01:e9:2c:7f:e0:d8:78:3f:5b:ce:07:49:21:
7a:fa:5c:94:a6:30:f1:30:f7:c2:fa:13:96:69:85:
5b:27:e8:c4:f0:d3:6a:15:6f:cb:2f:93:e3:ed:e7:
51:63:8f:6d:47:9e:08:29:b3:69:6d:75:95:6d:04:
02:ae:65:b4:61:5a:b2:1a:42:ad:e1:a9:21:02:97:
72:75:ed:5e:e9:5f:d8:3b:ac:b7:9f:3d:f7:3e:9f:
6b:61:be:6f:3f:88:af:2f:21:1c:08:1e:cd:15:80:
a6:11:be:3e:94:7f:55:46:e6:6d:f3:8c:44:98:18:
b1:c3:14:75:31:21:86:4c:26:4d:58:0b:a9:03:d2:
c6:ce:2e:72:e0:0f:8a:bd:83:54:2d:e0:5c:08:79:
38:5a:f9:9f:8f:c3:b8:06:5e:a0:eb:a7:fc:cf:3b:
79:15:44:aa:ea:3b:eb:e2:2f:c5:15:85:4e:ea:b7:
b3:5e:bb:6d:bb:09:52:38:fa:7e:7e:fb:45:dc:5e:
f0:38:b6:04:f6:f2:a7:57:b2:55:30:c7:e4:5a:6c:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:E1:0B:20:00:76:36:72:2D:17:54:FE:34:60:EC:6D:73:BF:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40db2b67-4193-37e9-838c-7c54c5af9ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:6e:c8:a7:35:f2:b0:ff:55:4e:53:be:d7:fd:7c:b5:95:05:
33:3e:68:0a:20:12:7c:90:b5:25:90:e0:0a:5f:e0:e1:bd:90:
0f:30:cb:b0:ac:a9:45:ef:81:d1:9d:81:48:60:0e:c4:fd:ea:
1f:6f:bd:cc:8b:28:d0:fc:04:05:15:4c:39:77:29:ab:41:5c:
50:eb:9f:b1:c9:57:4a:e7:90:04:00:aa:15:12:77:10:36:11:
7e:38:4a:15:63:60:50:cd:f1:f5:2d:32:4b:7c:3b:24:d0:eb:
df:a2:83:4e:1f:20:08:67:55:f1:3d:3a:e1:9d:c8:20:55:ee:
17:54:80:9c:bb:a4:6e:93:48:80:5d:41:db:90:7d:2b:74:c8:
b6:5e:4c:84:27:24:85:3a:d4:7f:e5:4b:4d:61:c0:d4:66:90:
57:3c:1f:3b:ed:8b:cc:e2:c1:8e:27:4c:c3:a3:8f:1a:9d:1f:
36:ac:78:30:ab:7b:45:6d:d4:65:87:2c:71:f5:61:07:c2:e0:
75:f3:5e:fd:26:71:af:ac:ad:b5:91:b0:12:a7:c1:a3:ae:aa:
8e:04:43:81:6c:69:8b:25:61:ab:c9:ea:ca:3a:3f:35:18:a6:
b6:5e:cb:ec:a0:fd:81:37:48:d1:0e:9f:f0:b0:9b:78:15:6f:
77:49:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:26:05 2025 by rpki-client