Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5506fe26-734e-3097-b14c-db255852070e.roa
File: 5506fe26-734e-3097-b14c-db255852070e.roa (raw, json)
Hash identifier: 0Cbbyp2b7uSCJ975B8tw0/TK8NTToMDLX3j1DTps2yU=
Subject key identifier: 23:7A:46:0A:69:4D:B3:82:3D:F4:34:31:B1:C8:43:48:22:5C:30:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BBA51D734E11EE3A18B74F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5506fe26-734e-3097-b14c-db255852070e.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:a5:1d:73:4e:11:ee:3a:18:b7:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=c9c0fb00-3d33-4004-b5ca-8f7f1e3dc309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:f1:1a:74:db:82:8f:49:25:5b:12:6a:60:
68:45:1f:55:e0:d5:d5:a1:65:f9:eb:ac:2d:d7:7a:
e8:d6:7f:4f:45:d5:42:10:3f:f0:51:51:85:7c:94:
2b:41:09:f1:bb:8b:0f:86:eb:e0:9d:64:8c:76:91:
23:10:29:e4:8d:47:9b:18:e7:1c:cc:ea:63:fc:4b:
3f:e1:28:93:53:f1:9a:ec:c0:87:cd:03:e2:ac:f6:
c2:5d:ca:ef:27:da:f2:5a:69:6e:8b:66:09:80:6c:
d5:fc:2a:82:b0:94:1c:b2:7a:5b:48:d8:58:c0:54:
f2:e6:32:a2:4e:fe:74:72:4a:6b:6b:8f:42:9a:0d:
a4:19:71:62:23:9e:eb:5e:90:6c:5e:67:18:0a:34:
bb:b1:53:56:9e:a1:9b:2c:41:9b:54:f3:34:21:c5:
42:e1:b5:db:05:ce:3c:a3:3b:02:21:d6:25:96:c0:
23:21:87:65:47:2b:c4:8a:75:e8:b4:fa:79:a4:32:
e7:38:69:04:3e:a3:02:52:75:a8:91:ec:a0:50:97:
89:e2:aa:56:1d:54:db:05:8a:af:95:83:a1:b1:df:
6a:f8:86:39:16:61:b1:89:84:86:6c:9d:bc:45:bf:
c7:32:02:dd:9f:90:d3:5b:05:a5:20:e6:3e:3c:85:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:46:0A:69:4D:B3:82:3D:F4:34:31:B1:C8:43:48:22:5C:30:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5506fe26-734e-3097-b14c-db255852070e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:59:13:fc:90:d0:99:af:f6:ef:15:20:9f:7f:cf:92:63:7d:
0e:94:ef:04:31:8b:d0:f0:58:23:a6:79:cb:17:5d:b8:8d:a6:
13:ce:6d:62:3b:5f:91:97:c9:9f:ce:df:16:5e:29:d5:ef:f3:
c4:f1:28:9e:d4:a8:f2:9d:d5:70:67:ac:80:9f:51:c6:87:b7:
f3:a9:c6:6b:2a:ed:c9:b5:72:03:c8:f3:ed:13:d7:90:29:9e:
8b:a3:3d:ef:69:05:0a:0a:c4:8b:4e:75:74:20:0d:e9:53:54:
5b:65:36:9d:07:35:d8:d8:f0:ca:74:12:c1:3c:56:4c:df:ac:
d3:b0:0d:e3:f0:02:5f:a5:ac:1b:ef:84:16:99:af:30:54:9b:
3c:1e:0d:3b:7c:86:2f:14:e5:17:8e:5a:90:6b:3d:cf:bf:a6:
ec:85:cd:ac:5a:d6:1b:69:71:db:18:83:cd:ce:5f:ff:74:ea:
d3:77:32:2d:45:8c:47:07:f4:4b:87:06:ca:0f:a6:72:14:f5:
88:4a:be:df:5f:27:86:d6:99:9d:c3:0e:2a:fa:0b:94:d1:f4:
dd:c1:d4:28:84:2b:27:a0:2f:50:44:0a:bc:7f:08:2d:50:dd:
9e:0f:62:d9:6c:83:ea:a3:99:08:62:d9:eb:b1:db:40:7f:87:
0a:9c:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:15 2025 by rpki-client