Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d811ef5-0296-3487-a823-2da7ef099a00.roa
File: 4d811ef5-0296-3487-a823-2da7ef099a00.roa (raw, json)
Hash identifier: TuodeWOPPnon2ryH/lHUARgT9SoquNQCeArbVptFeyE=
Subject key identifier: B7:6A:BE:B0:57:7C:CD:7D:68:3A:A9:86:DD:3C:30:BB:FC:20:15:AA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA42690B0E8A2EA668549E0E8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d811ef5-0296-3487-a823-2da7ef099a00.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:26:90:b0:e8:a2:ea:66:85:49:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=06abfb0e-490a-4a2d-8143-b6946b4cdcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:85:c3:52:7f:9c:4d:4c:c2:e3:ca:08:5a:
fb:c3:ba:50:b4:c9:62:f9:3c:13:dc:37:46:c5:0a:
7a:44:98:bf:8b:c1:71:3d:8f:94:25:be:cb:b9:ca:
02:94:fb:c9:c8:60:b1:5f:d4:83:33:83:be:23:32:
74:04:c9:62:57:fa:45:2e:77:ea:c8:c9:62:55:0b:
7f:d1:12:15:f8:26:d0:c8:20:ae:b1:c4:01:e9:8e:
ea:f0:14:ae:d6:27:96:6f:4d:29:36:4d:45:df:67:
c7:51:8d:c5:84:d6:be:74:3a:9b:ff:04:e2:58:c7:
8b:51:08:fd:5f:e8:94:6f:dc:1e:ee:95:38:d1:8f:
71:54:97:c3:c2:3b:68:3e:bd:9d:60:8d:c3:2c:50:
d3:7b:95:54:af:78:19:b5:db:16:bb:16:6a:e6:62:
a2:3c:de:2c:01:6a:e0:62:46:6f:57:7e:06:2e:7e:
77:e7:30:51:e0:ae:f5:d7:54:e1:0d:82:84:4b:5a:
15:b4:7e:97:64:f0:a5:74:85:e0:f1:00:97:c1:4c:
d4:6d:89:33:d3:c0:a7:db:e1:ba:e2:4c:8f:e7:5e:
95:ba:64:f7:bb:fa:f8:fe:52:8c:4e:bd:0b:71:79:
22:64:41:ec:92:e6:a8:c9:05:5f:70:43:cb:a0:b6:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:BE:B0:57:7C:CD:7D:68:3A:A9:86:DD:3C:30:BB:FC:20:15:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d811ef5-0296-3487-a823-2da7ef099a00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1e:d6:07:ae:c9:f5:38:b1:a0:ee:08:30:41:dc:69:3f:7a:
4f:1b:60:56:04:81:3f:7a:b9:37:95:4a:74:b2:50:19:0e:4c:
ca:c8:26:a0:b7:42:35:40:9b:00:7d:ab:66:7e:30:38:95:8e:
99:e4:26:55:ce:61:8a:ff:37:07:92:08:7f:a0:e0:b9:0d:b7:
4e:d1:7d:b8:d3:d9:ac:4f:68:fc:ff:88:6c:97:50:16:82:3e:
2b:9b:b1:f2:7f:7f:88:6a:b4:d3:25:f7:64:66:62:2a:9c:ee:
f3:3c:80:94:48:15:42:fc:36:d8:77:a0:0a:5e:f4:9d:a8:3c:
ea:28:35:27:40:87:92:b7:f3:1d:dc:08:2a:9c:48:1b:c8:59:
c2:53:86:3d:a7:8c:c1:e9:88:67:e6:75:8f:78:f7:0d:25:2d:
f2:26:49:1f:31:40:a5:03:86:3c:7d:5a:59:e5:bd:16:31:00:
20:b7:60:ca:51:0e:70:10:61:da:c0:2b:89:5d:8c:14:cb:42:
cb:38:a1:4d:37:e2:74:40:d9:5d:da:81:bc:8a:12:9c:07:17:
b1:08:24:12:e1:f9:41:ea:75:84:d9:78:1b:55:56:1b:bb:d3:
59:ff:76:c2:45:91:66:46:50:75:5e:62:42:f9:ab:40:c0:fe:
f3:00:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:42 2025 by rpki-client