Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59af183c-890c-34b6-9ee4-0433b3345981.roa
File: 59af183c-890c-34b6-9ee4-0433b3345981.roa (raw, json)
Hash identifier: 3nsJF8RLyWJ5IHbMvmgOmBLxkNBOErdbLiqC69Wp/lM=
Subject key identifier: 44:DD:03:53:FB:60:5F:45:EF:3A:93:CE:C7:9F:35:73:70:4D:40:3C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95F1904E397F13B187085D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59af183c-890c-34b6-9ee4-0433b3345981.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:f1:90:4e:39:7f:13:b1:87:08:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=7ab8f9a9-255c-4d8c-ab38-6d5018d22a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:5f:9b:f5:58:81:34:b3:8e:a6:49:34:a8:
27:84:c6:c9:c0:49:d5:04:bc:f9:36:8e:01:7b:7e:
74:9c:2b:18:66:96:69:71:e7:e6:e2:1f:7b:10:8e:
72:a6:4b:d3:cf:f4:85:06:27:19:55:67:98:0f:43:
34:17:60:77:cf:09:c9:39:9a:6f:dc:a6:31:e7:8b:
d1:d8:13:b8:f5:6f:14:b5:3c:e6:5c:26:48:85:44:
d9:6d:41:89:9c:4a:fe:8b:0b:9e:53:10:7e:f3:4d:
80:83:c4:2b:61:8a:0c:a8:aa:fd:94:5e:51:3d:db:
a7:c6:74:7c:6f:be:90:7e:75:f6:e3:f0:cb:9e:f7:
f5:aa:3f:cb:a9:e3:d3:95:59:e6:4d:07:69:2f:69:
72:a2:9e:3f:09:23:e6:1f:5c:30:49:2e:11:84:3d:
30:f1:25:d1:27:4e:a0:bf:d0:32:e1:4c:5a:ee:2e:
a4:45:ff:4f:50:f7:a3:7a:6c:83:b7:e3:ef:4e:81:
d3:a9:f6:f0:b9:9f:16:25:fa:10:28:e5:22:c0:93:
53:18:78:d1:39:6b:0d:1d:43:9c:7d:ef:0e:3c:6f:
e2:3d:07:77:d3:08:66:25:92:b7:25:c6:19:e3:8a:
0e:3e:f7:7d:10:e5:2d:cb:b1:ae:ff:e5:fe:8c:95:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DD:03:53:FB:60:5F:45:EF:3A:93:CE:C7:9F:35:73:70:4D:40:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59af183c-890c-34b6-9ee4-0433b3345981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:79:ef:05:4b:55:9d:2a:f5:05:20:3f:6b:0a:e5:c5:00:a9:
41:be:a9:b7:24:fe:29:4a:37:19:88:fd:d3:30:ac:4e:ee:a4:
17:f8:d5:70:cc:da:e4:aa:ba:50:a5:51:fc:22:c0:7c:9c:bc:
22:6e:4d:59:ff:b8:67:91:18:0b:25:ba:d2:07:ca:f1:12:3f:
13:2d:ed:6d:ce:8f:80:de:23:8e:30:bb:12:89:e0:52:a1:01:
d2:24:17:56:c8:f3:54:33:60:01:2b:a0:c4:76:10:a1:51:ab:
16:75:17:e4:32:b2:e6:ee:34:3c:06:94:db:72:d6:bd:6b:b5:
1a:80:1f:0b:40:a0:1a:1d:40:04:56:29:1f:b0:1e:eb:fb:c8:
7f:75:23:20:04:d8:58:65:12:e9:46:53:d5:58:d5:2e:d0:b4:
46:40:d8:9d:5a:88:14:e2:1d:ca:6d:52:79:1a:99:3c:07:47:
fd:38:0d:79:ce:ca:42:01:c3:d1:b0:0d:60:04:7d:36:e0:0a:
52:a1:79:45:8e:a2:36:96:51:5b:27:a7:96:09:a6:2a:87:a9:
a8:eb:06:e2:43:0f:b9:1e:0f:4b:55:86:04:98:4e:f0:e8:8d:
19:4c:eb:22:f1:fe:a9:e2:94:b4:a8:d7:04:bf:51:53:c2:bc:
84:8d:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:59:59 2025 by rpki-client