Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57f9c35c-07fd-3071-b0a9-e7596128fbe3.roa
File: 57f9c35c-07fd-3071-b0a9-e7596128fbe3.roa (raw, json)
Hash identifier: 5bgzcKySrwas81Q9QVWPekUJWvKs6ydCa4OHExBxNOg=
Subject key identifier: 5E:9D:1B:36:CE:DB:5A:A9:E7:44:AE:4B:04:2B:37:9D:9C:19:AC:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8385E96D3970338064D5CC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57f9c35c-07fd-3071-b0a9-e7596128fbe3.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:85:e9:6d:39:70:33:80:64:d5:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=89e406c2-e8e9-4810-aa45-781fb30c2fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:cf:d6:98:d6:39:34:4e:c4:ec:d9:29:c1:
34:f4:00:15:ae:20:9f:01:c8:ce:75:3d:47:5d:8e:
b7:9b:77:0b:a9:d6:59:bf:ef:4a:47:c5:52:4f:c5:
5c:05:56:68:b2:1c:38:51:d9:b1:4b:31:e2:1b:3d:
d3:9a:fc:70:fe:cb:e6:f2:3c:9e:e8:03:ed:f0:dd:
80:70:a7:d1:6a:62:39:f3:2a:aa:da:e0:67:b0:0f:
d7:29:5e:d6:45:78:a1:00:c0:10:5e:52:90:78:a5:
0b:a3:4f:15:ec:7b:d0:c7:e9:e8:86:6e:11:88:21:
1e:a1:4e:da:b9:32:17:71:98:cb:ea:c8:8c:e9:f3:
3e:31:02:38:c8:ae:3a:fc:d6:0c:95:92:26:af:7a:
b6:c0:7c:65:02:c9:9e:ab:08:47:85:95:62:e6:ec:
64:5e:92:a1:26:57:aa:95:dc:f2:e3:d2:85:17:3b:
1e:79:26:28:f2:07:51:6b:86:54:df:97:3c:d2:0d:
4e:76:5d:b1:0b:8f:46:f8:84:f5:1a:74:b7:11:63:
20:8d:37:61:97:c9:4c:9b:94:88:33:13:5e:fd:2c:
4f:8a:c9:a5:6a:2b:c5:6c:79:e3:77:c8:28:8d:25:
ed:66:71:72:ff:8e:83:d3:e6:38:2e:71:98:76:48:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:1B:36:CE:DB:5A:A9:E7:44:AE:4B:04:2B:37:9D:9C:19:AC:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57f9c35c-07fd-3071-b0a9-e7596128fbe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ca:a5:9c:1c:72:fb:67:2e:ce:55:0e:b8:88:45:83:32:dc:
de:d5:bb:3b:d7:18:18:71:22:a3:f5:50:f7:8f:5a:dc:bc:5f:
a3:ad:6f:34:eb:00:98:8f:ef:d2:36:30:0a:73:1d:3b:85:44:
fe:57:bf:90:07:c7:8d:86:09:c9:90:b4:9f:0f:cc:da:36:ad:
e2:b9:84:27:1d:e0:cb:f2:5d:60:29:e8:40:26:a7:08:9f:01:
bc:38:0a:c5:9f:66:43:73:4f:dd:41:d8:fc:02:99:a3:28:a7:
56:73:9b:f8:03:b9:e1:74:76:56:a3:65:3c:50:74:6d:c6:40:
aa:6b:ee:2a:a3:b9:37:23:84:de:10:c6:95:4e:09:1a:8f:4d:
08:76:df:8d:79:0b:df:54:bc:1f:59:ac:d8:8e:f0:f7:a3:88:
08:b7:f1:37:f1:0a:b4:1c:6b:fa:63:a8:f1:e7:07:e1:39:dc:
9c:75:9f:91:dd:4e:28:00:13:66:1f:d7:29:65:c7:9b:d4:d0:
87:50:0a:db:ab:8a:43:10:96:c8:9e:26:4f:dd:e7:10:6d:ec:
18:a4:d3:91:87:70:6e:7a:8c:96:3a:a1:36:f5:59:c2:70:43:
d5:0e:1c:79:6e:3c:d2:bc:c2:66:b5:c1:09:af:07:a3:b4:f5:
f7:0a:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:34 2025 by rpki-client