Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58f15f62-bb6d-3219-b720-ccdfa5262723.roa
File: 58f15f62-bb6d-3219-b720-ccdfa5262723.roa (raw, json)
Hash identifier: tscaA+lek9xoPjNlZw+L75IKAvklEC562LqG/UZuhXM=
Subject key identifier: 55:BF:B9:D0:9B:DC:02:6D:CB:FF:A2:39:69:F5:7B:E2:FB:A2:13:CE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F569F5B364456731B0352E780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58f15f62-bb6d-3219-b720-ccdfa5262723.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:9f:5b:36:44:56:73:1b:03:52:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=e73f580a-09ab-4389-a310-60298d383018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:26:5c:08:4c:65:8d:b0:55:55:2f:34:94:
69:63:dc:69:a2:0f:88:7e:1d:e1:1b:9b:f4:04:b2:
2f:34:99:ec:09:26:e6:c2:72:0a:64:9f:c7:48:b1:
e9:5e:53:94:39:9b:b1:44:86:6f:d1:7e:67:d0:98:
ed:3e:6b:c0:25:8b:21:2f:25:da:09:0d:78:95:47:
07:16:7a:86:b1:49:99:cb:3f:14:09:26:79:9d:8d:
ef:b7:19:11:f4:0e:80:b3:62:0d:ba:72:63:59:dd:
e6:08:dd:a8:19:85:1a:8e:f2:79:44:0e:26:ae:8c:
5e:3b:86:f1:67:a0:0a:11:58:87:c6:55:3d:ae:6a:
92:0a:b8:19:cf:0b:4e:f5:f3:80:ac:45:50:52:e1:
40:49:8b:1e:19:4a:cb:4b:aa:e1:18:f6:b4:b3:8b:
1a:97:14:9a:e0:c9:2f:75:4a:47:c9:5d:94:0d:a4:
cb:54:e3:06:b4:94:6c:8c:1e:ae:f4:3f:cc:ec:0d:
cf:5c:78:9b:30:36:5b:1d:5d:d4:13:c3:e8:fe:58:
7a:de:36:8a:87:8c:80:70:56:d8:16:a1:a3:ae:b8:
0e:8d:94:e1:12:c0:5a:84:b1:48:dd:12:11:ae:5b:
7e:85:7a:db:c2:eb:1b:49:4c:6c:0d:fe:7d:cf:72:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:B9:D0:9B:DC:02:6D:CB:FF:A2:39:69:F5:7B:E2:FB:A2:13:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58f15f62-bb6d-3219-b720-ccdfa5262723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:98:3e:ed:05:4c:8b:14:9a:0d:2e:2c:39:60:5f:61:3d:63:
15:cf:26:ba:ad:ec:a4:c0:46:dc:b2:5d:4e:1d:ef:26:21:26:
76:ac:20:0f:95:a4:a4:d1:37:c1:2c:ba:0d:84:9d:95:7a:4f:
4d:3f:ff:28:59:5f:7b:d3:21:0a:77:a1:e6:cf:49:ee:08:ff:
87:23:0d:66:b0:a6:74:4c:8e:07:7b:d6:81:a3:bb:da:44:f4:
f0:cb:c3:c4:2a:7e:e3:e6:2e:dc:84:02:95:45:4b:9e:e0:7e:
87:a7:67:c4:7a:b2:04:0e:3b:d7:38:79:89:ec:0d:d7:7b:6e:
99:91:21:c5:b7:60:43:35:5a:ac:00:73:5d:d4:1e:36:a7:0c:
44:ec:d3:a4:41:b3:66:8f:52:ca:0e:54:bf:8f:14:8f:47:9c:
ee:95:31:a9:d2:52:aa:8f:6e:1e:cd:4d:df:b0:6c:52:9b:13:
03:f8:58:8b:f2:42:1d:a0:14:bb:7e:65:f2:e9:d8:c0:e3:0f:
81:84:cf:f2:90:30:44:46:21:82:bb:1d:db:05:67:c1:b0:40:
b8:ef:04:b8:29:a8:f2:22:c7:94:f3:ad:75:55:12:6d:71:49:
ca:c1:d5:d6:42:bf:80:55:96:88:ed:18:e8:82:5f:f2:83:59:
15:74:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:19:54 2025 by rpki-client