Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cffa771-228e-37e8-a657-d6809ccac0c0.roa
File: 4cffa771-228e-37e8-a657-d6809ccac0c0.roa (raw, json)
Hash identifier: MgjFWFBcgmnS0WJvT2c4rKQcbyXxdq25IRTaK25KDEM=
Subject key identifier: D3:BB:1A:CE:4C:A5:2D:E3:DA:44:A1:AC:BC:75:3A:C4:40:E6:63:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD06962B0C68162CDD8FFD280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cffa771-228e-37e8-a657-d6809ccac0c0.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:69:62:b0:c6:81:62:cd:d8:ff:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=bb51c320-8d5a-472a-998a-b2d57bf7bc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:ae:43:22:47:88:e8:de:e5:93:12:3e:93:
ba:f0:17:13:95:7b:9b:ff:c8:a3:f0:ba:be:ac:90:
22:8d:9f:36:be:5f:96:40:f0:6a:65:98:5c:b8:df:
7f:74:9a:15:e8:ec:c1:73:5f:38:8f:4e:fb:06:06:
6a:75:6a:b7:20:f4:07:3b:e9:44:31:d5:b6:29:2b:
04:7f:3a:e4:96:99:01:a8:1c:99:bc:d3:6c:df:28:
3a:da:21:9a:0b:ab:c2:69:61:c2:65:0c:49:5c:c4:
e2:33:ae:0b:7a:22:4e:04:eb:6a:3b:73:c7:28:f8:
1e:29:42:ce:6a:aa:77:ae:c9:da:ba:2f:1f:3d:2d:
10:0d:fe:73:8a:dc:e2:da:af:b0:af:24:0a:7d:77:
6b:52:3b:e2:15:4f:17:53:f6:10:8a:da:13:da:dd:
87:b0:c6:84:9d:ef:70:b7:23:8b:67:ba:5f:ed:69:
c5:dc:3a:09:54:17:00:eb:2f:b7:e3:c7:1b:a7:76:
cf:7e:81:36:53:73:07:96:99:4d:49:2c:71:d3:dd:
9c:45:ba:e1:7b:59:a5:dd:d7:50:82:77:4c:6f:30:
a9:2d:c6:99:90:0e:e6:78:a9:04:54:cd:d9:f6:ae:
bc:f3:d1:16:4f:0f:2d:61:ec:0f:76:fa:09:5a:4a:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:1A:CE:4C:A5:2D:E3:DA:44:A1:AC:BC:75:3A:C4:40:E6:63:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cffa771-228e-37e8-a657-d6809ccac0c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:40:c0:92:32:c1:5e:49:b9:fa:c2:ca:f9:bc:ba:00:c7:3a:
2e:36:8f:c9:9b:b0:da:b8:bf:d0:4a:05:10:88:24:a8:54:54:
30:b8:61:7a:2e:81:db:61:1e:b0:5b:79:b7:d1:29:dd:0c:1b:
80:be:5c:a7:75:3c:14:60:69:6c:d8:a2:c5:06:3a:f5:25:d2:
85:db:79:f3:9d:6d:f0:fe:54:ee:17:c8:7d:d2:01:e7:df:20:
9e:73:bf:37:4d:ff:c3:2e:6e:8e:8a:ef:98:ec:ff:f7:ba:b8:
3a:9f:f4:11:82:7b:5f:ad:3e:d4:58:cd:da:be:08:90:ce:be:
79:fe:70:b7:1d:56:64:b7:05:ec:e7:27:1b:f2:a0:58:50:d2:
23:c0:a2:c0:fb:b9:34:ff:82:97:3a:e2:ee:59:ee:15:46:cc:
d3:32:61:76:48:5c:ce:44:96:6b:e9:80:24:7a:6c:cd:4a:56:
50:35:fe:ac:a7:9f:05:38:c4:98:b0:50:66:0c:81:fa:e7:10:
a7:ef:09:80:16:96:5f:d3:14:c0:82:19:c0:6c:eb:b6:e1:be:
1a:8d:c2:a9:0d:31:9b:9b:40:c0:11:39:b4:a9:92:85:33:d6:
a5:9d:0a:2b:46:b3:50:0d:92:45:17:af:7c:66:a7:59:2e:ce:
59:ba:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:19 2025 by rpki-client