Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/590d1a2e-9ce4-3e49-a1f0-27723dc439da.roa
File: 590d1a2e-9ce4-3e49-a1f0-27723dc439da.roa (raw, json)
Hash identifier: MrzkfOFZHfkz/XtK9odvZwOm4dhugNGZLdfbUJpVSn4=
Subject key identifier: 71:71:95:56:B2:57:05:6D:8D:70:D5:0C:A3:25:35:2B:0D:EA:92:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7CB062DDD8E14A49B6BB7440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/590d1a2e-9ce4-3e49-a1f0-27723dc439da.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:b0:62:dd:d8:e1:4a:49:b6:bb:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=09b159ff-f9b8-427b-9dde-5d23688ab864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:f7:f3:47:ad:1f:a1:38:e6:68:fb:ed:60:
c0:94:a8:27:01:ef:14:20:94:99:c8:cd:b5:fc:60:
e7:68:04:ae:bc:a4:99:2a:6d:dc:d4:8e:85:4b:e4:
b4:9f:61:ba:7c:72:cf:ff:16:f1:c5:37:c0:8e:37:
9d:d1:6a:a1:79:3b:ca:f1:1e:0c:01:1f:15:18:e9:
6c:92:4d:18:37:0d:f6:55:f8:d8:f1:c4:4a:76:34:
4b:55:bc:b8:d8:50:68:ee:b8:7d:3e:9f:52:06:24:
0a:7d:6e:7e:5a:11:0c:8e:14:dd:bf:63:cb:0e:ab:
ac:60:ac:4f:fe:9f:52:ec:09:f4:74:86:64:5a:47:
bf:89:3e:d0:a5:82:3f:c6:c5:25:c0:89:98:0b:a8:
27:16:90:72:ab:bd:d6:42:92:a0:b2:58:89:86:a7:
b5:dc:42:95:31:f8:0a:ed:d9:4b:2b:93:b9:73:24:
7b:0b:c6:04:a4:65:87:1c:d4:37:69:5f:3c:6f:3e:
8c:30:a6:b8:24:bc:d4:57:63:96:32:d0:36:b0:da:
ae:be:2c:0c:d9:2f:c3:1e:db:79:3f:ee:89:48:88:
b1:76:a8:8e:a8:97:3c:c7:65:d1:36:25:37:cb:9a:
71:51:0a:9b:5a:4b:58:e1:bb:4b:7b:05:39:0f:78:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:95:56:B2:57:05:6D:8D:70:D5:0C:A3:25:35:2B:0D:EA:92:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/590d1a2e-9ce4-3e49-a1f0-27723dc439da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:f1:35:db:a4:d5:3a:f3:6c:6a:7f:d1:d5:a4:61:78:8d:6d:
d5:8f:71:83:d4:d8:f5:d8:2b:01:7d:14:89:45:3c:45:36:a7:
fd:b3:2e:e4:b2:dc:79:c5:82:20:70:5f:26:3a:fc:e0:26:a6:
b3:c9:c7:a6:dc:59:aa:ec:e6:2e:c1:d9:3a:a9:d1:64:b0:33:
0e:84:38:c8:69:75:7b:67:22:10:bf:0f:5c:57:e2:95:44:f9:
4e:29:32:9e:83:14:83:87:bf:b1:ad:10:10:01:2e:20:e3:68:
ca:6f:18:5a:c7:a1:c2:b3:d9:7e:69:7a:a3:22:ee:a8:b1:30:
e0:b2:50:e7:85:d9:56:fa:3d:64:c2:5e:33:9e:89:55:a9:ce:
b0:34:47:19:45:aa:89:eb:40:12:76:44:50:cc:90:c0:7b:70:
17:a3:61:a5:53:fd:2f:cc:27:84:08:1f:3d:c3:96:96:cb:ac:
e1:48:f7:36:a4:f4:52:56:91:46:b4:5a:3c:9e:80:31:3e:d8:
44:da:1e:28:ab:ba:c7:46:7e:cd:0f:bb:e5:ae:d5:ac:47:07:
66:0a:c0:1f:c9:d2:af:90:b1:95:fd:77:26:9c:62:ef:43:66:
19:6f:ae:ac:39:0a:7d:d3:de:2d:68:57:0e:fd:c2:67:93:a7:
93:8c:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:05 2025 by rpki-client