Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bc13af9-0394-329a-b289-fbcc501d194b.roa
File: 4bc13af9-0394-329a-b289-fbcc501d194b.roa (raw, json)
Hash identifier: /D9gFBX+IX2zLuHqijLw9sH0sjraHGvZIcn2vZb49MI=
Subject key identifier: 4B:E1:0C:A9:35:EF:BA:6C:2D:86:F6:9A:A8:31:8C:26:2D:2B:8B:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB9CE3771D65413E8DCAD590
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bc13af9-0394-329a-b289-fbcc501d194b.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:9c:e3:77:1d:65:41:3e:8d:ca:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=f5fd6863-81df-44e2-974b-30c9ba5dda5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:d7:01:f1:12:38:81:f0:6d:24:79:25:28:
c8:cb:9d:54:27:99:ed:e1:a4:52:51:ff:b8:e3:51:
26:0e:22:72:fd:de:9f:1b:44:df:93:8b:79:fd:cb:
af:e1:f0:c6:75:f2:68:48:d4:72:d9:fa:df:04:fc:
bd:09:ec:76:cc:3c:a0:89:b9:e1:3c:db:05:5f:87:
34:df:76:ac:35:39:ad:13:e1:51:42:ef:50:61:3e:
65:3c:4e:ca:ec:65:4b:0e:1a:af:db:d8:11:23:3a:
87:68:67:1c:94:ff:9d:4f:af:45:fc:93:f2:39:06:
89:6d:e0:8c:bc:3d:4e:38:86:52:25:61:f3:0d:c8:
59:2a:b9:80:53:45:43:ab:cd:59:69:15:db:de:27:
73:9f:64:58:0e:03:a9:ae:73:72:3e:25:a5:23:3d:
e8:a3:84:cc:92:4b:49:53:2b:65:4c:3b:bd:a0:66:
98:c9:3a:1a:72:45:49:64:d4:97:61:1f:a9:bf:50:
2c:fa:9f:d7:82:79:db:bb:ad:73:d4:a0:f6:21:29:
4b:bd:45:f1:33:39:90:75:35:06:20:d0:61:b9:50:
8e:87:8d:9f:27:47:c0:96:3a:6b:62:f6:8c:d7:ac:
ed:62:31:c0:d6:7c:3f:71:b7:84:32:42:b7:3f:31:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:0C:A9:35:EF:BA:6C:2D:86:F6:9A:A8:31:8C:26:2D:2B:8B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bc13af9-0394-329a-b289-fbcc501d194b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:27:17:6e:ea:79:4c:35:82:00:d9:32:b4:0f:44:b3:76:64:
31:bf:a6:03:14:40:8e:5d:b5:eb:44:43:5d:57:27:4d:83:26:
33:1f:b1:15:f6:14:33:f9:52:27:aa:6a:80:17:3b:58:5f:cb:
38:5c:0f:a4:7a:6e:68:48:a9:a8:8c:2e:18:39:1d:b4:26:c7:
0a:e4:40:09:00:db:d0:99:fa:51:d1:b0:61:0c:09:ae:e9:ab:
26:bf:af:2d:06:43:02:fa:d2:55:3d:a3:92:fc:e9:b4:98:6c:
52:13:28:03:62:4f:dc:19:6b:19:eb:fa:e1:46:26:78:5e:ce:
66:24:8d:f4:7c:5b:16:a1:c4:30:1a:4b:fc:cf:6b:e8:13:71:
d7:39:4d:7f:04:14:b0:88:06:ea:f4:df:1f:66:ca:02:df:ae:
35:cb:f3:f3:02:92:70:45:d3:ac:93:67:b4:12:b6:0c:11:25:
3b:3b:ae:41:3f:34:21:f6:85:dd:fe:cc:97:da:7f:7b:55:fe:
5a:5b:44:47:85:ff:c5:73:40:3a:d3:ea:18:a1:dc:a9:03:7e:
2a:67:aa:25:22:77:d5:ab:0f:fc:da:8b:da:de:96:0c:bc:14:
76:26:ef:c3:b1:ee:5c:31:03:c8:21:a6:ad:1d:77:72:80:31:
9c:2d:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:13 2025 by rpki-client