Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b2ddaf-5079-37ac-88da-6af5bae7d7c7.roa
File: 56b2ddaf-5079-37ac-88da-6af5bae7d7c7.roa (raw, json)
Hash identifier: +5y8sbtdnfqPItBskAoVSpxv7tyIRv9Faziw9Bz5cMQ=
Subject key identifier: D8:0C:AE:E4:1A:4C:96:A0:A4:E4:96:DD:70:73:8C:D8:3D:7F:14:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B5731C10329BA2DFC3E6D8A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b2ddaf-5079-37ac-88da-6af5bae7d7c7.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b5:73:1c:10:32:9b:a2:df:c3:e6:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=5a43fac3-cc49-410a-af59-1ccb68caf155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:3c:3f:d6:27:37:7f:f0:27:77:61:8c:37:
20:a3:c0:4b:f5:07:6b:72:b3:14:1b:40:a2:4c:82:
72:fb:71:a7:3d:11:ce:a2:ab:b7:54:cc:09:d7:b3:
b7:d4:f7:e4:0c:01:23:cb:13:a4:a6:3f:44:2a:da:
d8:8f:bf:c5:71:1d:c4:29:91:52:cd:e1:8d:50:f0:
91:c5:c9:ee:5e:e1:0c:c1:e9:99:fc:8b:b3:72:a4:
e6:b5:76:2f:8f:4b:04:8b:23:39:db:8f:11:be:c7:
05:29:6b:9c:ee:63:e4:2b:fc:a2:5e:7f:14:50:aa:
1e:1d:b1:f4:49:3b:fd:2f:91:96:b3:a4:15:36:b6:
57:99:7b:5e:e6:b1:f7:92:f2:76:a0:31:4a:90:26:
2f:b2:d2:05:96:61:51:72:1e:e1:ee:ff:07:49:2a:
da:4c:eb:29:c5:09:4b:a1:79:b3:3e:a0:2e:d6:32:
9f:eb:6c:5b:b0:c9:9d:f6:4d:21:ce:d6:b1:7b:8f:
ca:0b:81:cc:31:d4:5b:dc:80:f0:a9:4c:61:e1:5d:
56:cd:19:fd:0f:80:dd:46:7d:a2:45:63:88:b0:91:
dc:a0:6d:d1:8b:7a:e5:b1:88:ba:8b:0a:68:b5:63:
71:44:61:eb:19:89:58:2e:57:d3:f7:55:5f:42:62:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0C:AE:E4:1A:4C:96:A0:A4:E4:96:DD:70:73:8C:D8:3D:7F:14:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b2ddaf-5079-37ac-88da-6af5bae7d7c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:62:53:81:90:6d:15:2d:90:61:3c:2c:ce:ca:d5:3b:85:c2:
32:6b:b2:dd:78:cf:bc:6b:7f:d1:6a:39:4f:c0:73:3b:fc:d2:
08:d7:09:07:e6:65:e1:e5:46:64:68:db:4c:23:75:c7:b0:82:
3c:97:2b:a2:71:5b:47:22:4e:45:33:4e:e5:ca:ef:3f:a6:78:
e1:f2:4f:16:45:1a:32:ea:de:c3:1b:3b:a6:1f:8f:9d:57:e0:
6d:27:2a:fc:e9:4c:f0:32:af:b0:75:93:80:a7:9c:75:cb:7f:
cd:d0:64:02:9d:e7:46:2e:cf:9b:b2:82:52:71:d5:10:6e:eb:
ea:07:57:b8:7e:c9:48:78:c2:80:9a:f7:82:ac:40:0d:c2:3a:
d8:7a:2e:a1:6d:22:e3:9a:94:ce:77:33:44:d9:b0:f9:d4:5d:
2b:85:c5:23:10:d7:ab:09:6a:09:6b:33:b4:18:5a:91:43:76:
ab:20:58:ba:a1:eb:8c:d5:72:fd:99:66:fd:1f:6c:75:06:2b:
5e:c1:5f:b5:4c:fa:13:50:66:a4:d1:4b:ba:06:68:e0:14:41:
46:5b:01:31:8d:4d:7f:59:fa:ef:4d:47:d0:e0:d5:ad:37:fd:
26:48:87:98:89:38:36:ad:f1:3d:85:20:82:d5:be:68:3a:84:
08:c2:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:18 2025 by rpki-client