Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61263ad9-d151-32f0-a744-61b88277e86c.roa
File: 61263ad9-d151-32f0-a744-61b88277e86c.roa (raw, json)
Hash identifier: uj2wzUHcaDHXbTZwojXFv2Fga2+ohWAIx35tL6jmrPQ=
Subject key identifier: 9F:31:82:C0:29:C5:DB:2F:15:B7:78:1D:F8:47:02:40:62:AB:60:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840198523C0FDB89E88D69FBB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61263ad9-d151-32f0-a744-61b88277e86c.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:85:23:c0:fd:b8:9e:88:d6:9f:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=bb2946d8-78c8-4021-a848-4ad3d249ef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:0b:f6:bf:64:b6:b1:e1:1b:6e:8d:16:d0:
0e:05:6e:4f:08:83:5e:d1:bd:f6:34:6f:1a:17:f2:
a6:ed:7a:c5:8e:ff:db:43:95:3c:ce:a2:c7:c9:67:
1d:a2:95:16:af:55:a7:a9:3c:a4:ad:ce:bc:d9:42:
63:cb:44:47:97:39:4c:bd:31:27:11:6b:7d:a5:fc:
7f:7e:c8:72:ac:ec:ef:f6:47:50:91:06:89:9b:56:
1e:ab:01:aa:43:d0:69:78:91:7f:9b:5e:32:88:99:
7c:22:bb:42:83:91:f1:f0:02:c8:f8:43:7a:5d:82:
9d:f5:df:61:22:15:fe:81:7b:89:1f:32:89:51:17:
04:ef:ed:a8:0f:33:a0:7c:d6:ea:98:de:70:a9:58:
30:e2:e4:60:44:af:25:f9:56:77:02:67:f4:32:ab:
01:5f:15:67:66:d6:4e:80:09:3c:79:79:83:06:82:
9b:34:f8:a5:32:7f:9a:6f:ef:c0:4a:ed:a9:f6:6a:
bd:55:1f:57:0f:48:e3:b4:23:e9:cd:5a:c5:48:3c:
0c:39:c9:23:73:c7:b9:be:93:76:f2:0d:93:97:37:
bf:d6:7a:8f:5b:60:78:ce:df:5c:0a:04:d2:4f:38:
d0:03:ee:2d:f7:1e:ec:bf:2a:19:36:58:83:40:cc:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:82:C0:29:C5:DB:2F:15:B7:78:1D:F8:47:02:40:62:AB:60:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61263ad9-d151-32f0-a744-61b88277e86c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:f8:d3:4f:e1:97:22:8b:a7:fc:97:0a:4f:c0:f5:dd:d5:d4:
06:8c:8e:39:e8:76:13:60:c0:8d:6e:d1:5e:aa:24:a6:ac:c2:
32:cf:5b:88:b5:44:f7:89:9e:26:ec:ef:bc:9f:45:52:b1:05:
2d:c5:bb:c9:6c:0e:1c:46:95:27:b3:c4:d3:db:11:f1:5e:c0:
02:99:79:55:df:8d:68:62:50:f8:db:b2:4c:f6:69:6e:8c:52:
b0:d7:10:d6:04:0b:8a:1c:70:99:75:f9:a0:23:97:be:2e:bc:
eb:e2:b5:6b:a2:c2:86:bb:76:80:0a:5b:aa:28:77:06:ba:29:
34:f3:48:01:c3:b5:5c:e9:f4:b1:7d:67:45:ce:91:76:41:2e:
34:da:b8:55:6b:b1:0c:58:ee:59:1f:1d:86:b7:d4:c6:ee:4a:
ea:b1:82:41:d2:62:1d:71:26:a5:c8:c4:ff:e5:8e:b7:fb:04:
85:ef:28:94:fe:46:dc:49:8f:c6:cb:81:0f:42:2b:c8:a1:4d:
2c:eb:25:dc:59:fa:0d:23:0d:05:56:42:26:d3:24:bb:ea:b6:
4a:22:a6:d2:77:90:3a:6c:d5:53:25:a6:ef:b8:bf:aa:aa:25:
a8:30:13:a9:f5:49:fc:68:c2:43:e6:0c:27:01:06:24:f1:ba:
a9:54:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:48 2025 by rpki-client