Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/511f090a-5067-33fb-bbc8-53390ee9f279.roa
File: 511f090a-5067-33fb-bbc8-53390ee9f279.roa (raw, json)
Hash identifier: Z7Wk69+U7fbpRpw7J+EBsjSrf7csAHAw8TP3KLF1PYk=
Subject key identifier: 98:C1:B7:87:57:8A:79:B2:AD:84:54:58:EE:75:AC:6A:58:DD:70:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB7F947F3066CA12330D75C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/511f090a-5067-33fb-bbc8-53390ee9f279.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.64.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:7f:94:7f:30:66:ca:12:33:0d:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=7eca3d0f-5d64-4485-a9dd-9189e9a9b0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:d2:99:4f:3a:3d:96:21:4d:f0:3b:73:1e:
09:d6:0b:58:98:6f:de:12:0a:fe:5f:0e:6b:be:ea:
b3:4d:c3:5b:6b:b4:93:7d:6d:7f:62:a6:f1:c0:b3:
cf:68:cc:db:f6:be:57:18:1f:1d:6c:1e:1c:f6:7d:
41:24:d0:38:5a:f6:90:11:68:20:47:d7:07:83:04:
93:95:b9:43:11:f3:e9:9a:03:1b:37:f3:fc:9e:99:
7a:be:b3:bb:74:a6:18:0a:a0:27:d7:ad:99:58:6d:
97:fc:20:62:76:6f:79:36:2c:b4:ac:fa:4f:26:5b:
2e:e5:1d:da:91:c2:40:0f:a3:0c:d6:5c:26:59:bd:
aa:49:31:bc:94:a8:64:0b:2c:0e:ae:eb:8c:c8:1e:
e5:a3:96:bf:ba:02:2a:e8:1b:f3:08:ac:27:0a:38:
ad:d8:9e:cc:86:61:c6:f6:8f:df:2b:65:0f:aa:13:
e9:5c:d2:77:8c:68:e3:ce:1c:40:6d:b3:51:f3:8c:
4f:02:fe:9c:95:61:b5:a0:8c:82:4f:1e:5b:c9:a0:
68:20:e7:a9:b3:63:c2:c5:d8:64:33:fc:c3:c6:e3:
38:e7:ba:7c:2a:93:d2:26:14:47:66:74:5b:c0:e4:
e0:04:3d:ee:e7:9d:ab:67:7a:c9:f9:4b:23:33:00:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:B7:87:57:8A:79:B2:AD:84:54:58:EE:75:AC:6A:58:DD:70:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/511f090a-5067-33fb-bbc8-53390ee9f279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.64.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:47:39:86:bc:5c:3b:fe:f0:d7:ba:9b:a3:12:96:aa:bc:b8:
aa:98:ec:be:08:32:2f:68:9b:38:a2:df:bc:f5:31:a6:11:f2:
b1:26:ff:54:ad:32:e3:77:48:0f:eb:bb:14:ea:5a:a3:98:58:
91:7d:40:86:29:69:37:24:5d:7e:9a:56:96:b6:e5:ce:60:e3:
9b:ec:65:13:ed:df:12:3b:eb:ba:e3:66:51:d3:3f:10:02:3c:
64:9f:de:af:e7:33:33:43:30:33:a5:9c:4c:13:19:b0:e6:22:
63:5f:70:86:2c:89:05:87:b0:bb:51:8a:18:02:b3:7d:27:75:
2f:d5:4e:9e:e1:c3:d5:9e:c1:e4:b7:2a:49:c1:a1:86:51:e5:
7c:3a:b7:56:09:4c:fe:3e:90:28:a3:9a:7b:c6:6c:d9:c7:df:
88:0f:3a:07:11:56:af:86:5d:18:3c:bb:1f:74:5e:c5:39:35:
e8:1a:35:0b:c6:eb:21:68:5f:3e:40:4d:90:30:b8:e5:c9:ef:
24:e6:fe:04:53:c0:ed:61:ea:4a:30:77:d4:3e:d4:a5:85:85:
5f:1e:b8:10:72:c6:dd:30:e2:81:2b:26:a1:37:f5:7c:41:8a:
46:d3:06:7d:49:e9:67:65:18:dc:48:69:9a:1c:e0:08:81:09:
56:3a:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:43:22 2025 by rpki-client