Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41100647-4f22-3e32-92f8-59791d40f78e.roa
File: 41100647-4f22-3e32-92f8-59791d40f78e.roa (raw, json)
Hash identifier: gnQ86izBeg/FhSHrXWspQpRUnNTsjQlHJO0eDSe/VE4=
Subject key identifier: DF:E3:0D:03:F9:7C:2B:FB:42:68:61:A4:24:58:71:6B:87:EE:CF:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3AF71A18CE0A241B2A8B600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41100647-4f22-3e32-92f8-59791d40f78e.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:af:71:a1:8c:e0:a2:41:b2:a8:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=9d39b28f-9cf2-4067-8ee4-ca52956fed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:f7:6c:1f:1d:fc:f8:c8:73:8a:72:e6:be:
05:43:c2:3e:83:9c:e9:5d:25:d7:a8:2b:61:8b:16:
b7:71:9c:52:7c:8a:30:39:c4:e3:f7:c5:ed:df:af:
78:fa:89:ed:c1:99:bd:4a:e6:54:fa:c3:80:d2:bc:
2c:95:6c:6b:14:5f:ca:94:cd:a8:5d:74:3e:55:a3:
d8:f2:37:bf:43:3c:8f:8e:b8:bf:b1:70:46:63:67:
e3:b0:35:2e:e1:43:36:80:e5:c2:ab:27:5e:82:0c:
8a:b3:77:d7:54:21:cf:0c:6f:d6:fe:36:c6:78:93:
bb:0d:15:6f:a8:a1:0e:49:b2:7b:e9:d8:f3:72:45:
f6:48:22:cd:72:89:93:40:97:83:97:c5:81:04:bb:
fe:66:65:bd:d2:b7:5d:88:3e:12:e7:9a:72:d2:bc:
70:87:c4:08:2d:63:d9:4e:4b:62:b7:87:fb:0d:b4:
9e:49:a5:96:8a:6d:e4:b7:bb:2b:56:5c:6e:34:14:
94:d0:f5:f5:fd:fd:cb:45:f0:7a:d6:42:31:70:7b:
bb:61:82:3b:f6:fe:77:f6:c6:18:b5:d3:7a:10:e4:
5c:e3:88:1b:ad:ca:15:fa:7c:82:a7:1a:1b:1e:ac:
fe:c2:9a:72:b2:b0:24:28:80:88:0d:9d:f4:77:19:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:0D:03:F9:7C:2B:FB:42:68:61:A4:24:58:71:6B:87:EE:CF:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41100647-4f22-3e32-92f8-59791d40f78e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:11:ef:60:cc:e9:d0:9b:c3:a3:7e:67:40:f4:28:6f:8c:30:
f9:58:ff:51:79:58:75:6a:c2:30:3b:4b:73:2c:57:74:42:9a:
12:5e:88:ce:70:9b:cf:72:ba:21:04:ea:f2:4d:02:9f:64:f5:
4d:6c:1a:9f:fd:0f:d4:b4:ce:e9:d9:49:30:09:d7:b2:00:6b:
a7:49:eb:eb:af:c5:ed:8b:55:d0:b4:0e:05:c7:37:55:66:3c:
0e:8d:de:b3:ee:21:1d:dd:78:3a:ae:86:f8:98:25:1a:88:fc:
5e:0c:87:16:ef:ba:ad:68:33:ca:2a:8a:5c:60:f5:56:19:2d:
41:17:a0:c1:d8:a6:f8:d6:a1:1a:3a:5d:27:9c:07:d1:8e:06:
11:85:32:1c:4c:da:e5:bd:3e:98:35:5e:34:8e:4e:e1:be:17:
72:c8:db:4b:57:53:cc:89:7b:30:dd:5d:cf:6c:6b:be:f4:a3:
03:d9:04:82:9f:54:65:ea:23:f9:08:26:6c:de:78:29:ff:0c:
0b:4c:b7:94:55:d4:bd:fa:e4:ee:d1:10:e9:72:6c:a0:60:ee:
bc:bc:02:ee:5d:85:e2:3a:6f:e9:e9:b1:0b:0f:3c:d4:e0:72:
68:b3:3b:f9:f6:0e:38:ed:61:15:a2:72:c3:3f:48:fe:61:de:
c7:27:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:09 2025 by rpki-client