Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/619f9334-f050-32e7-ba20-2dd2af1341df.roa
File: 619f9334-f050-32e7-ba20-2dd2af1341df.roa (raw, json)
Hash identifier: NCPGzR/fs0NxAGyyAss9n+4TbfxJo15yDVnOg7Qid9c=
Subject key identifier: C8:22:73:CA:8C:D2:49:AE:6F:73:7C:7B:BD:FE:2C:7E:88:E0:88:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F07B26D459CBAA34EADD2A200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/619f9334-f050-32e7-ba20-2dd2af1341df.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:07:b2:6d:45:9c:ba:a3:4e:ad:d2:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=17cc6858-3811-4645-8f17-1d8e6dbad977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:52:00:0f:0b:4b:d6:7a:61:cf:32:12:76:
f2:ef:e2:a5:ef:3d:23:90:bd:16:95:ea:8b:c6:86:
d5:b3:20:8b:5c:cc:30:54:7f:cf:da:1d:ee:b4:f8:
69:12:08:3a:26:40:c3:08:fc:b6:2e:34:33:aa:5d:
a1:e5:13:0f:32:64:fe:1b:f0:e5:ea:36:a1:2a:f3:
56:88:fd:45:e8:66:e6:a8:fc:28:82:69:a8:76:46:
10:ee:f9:61:7b:24:00:83:69:77:c7:8a:e7:c4:21:
0d:ff:3e:3f:45:35:1e:bf:01:ec:28:8a:52:a3:09:
59:13:50:8f:e7:9f:82:fc:0f:f9:bf:4b:ec:c8:ca:
20:52:e6:55:f6:f2:33:e0:f0:db:3d:f0:cb:36:97:
79:bf:62:87:3b:ef:3c:57:34:dd:b2:be:c6:06:33:
a2:f9:dd:79:f6:7f:8c:e0:b3:85:93:84:95:bb:62:
aa:64:97:50:54:0b:b5:b8:17:f2:d7:9f:eb:0d:cb:
d8:08:20:86:d2:94:7f:1b:9c:e2:f0:89:53:5a:56:
1e:bb:64:39:87:dc:48:8d:e6:5b:03:5a:87:17:69:
8e:9d:94:de:66:60:67:bf:3e:f6:81:24:58:8f:b1:
88:c5:10:30:f6:ea:93:33:fe:39:e5:bc:ca:f9:75:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:73:CA:8C:D2:49:AE:6F:73:7C:7B:BD:FE:2C:7E:88:E0:88:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/619f9334-f050-32e7-ba20-2dd2af1341df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b6:84:3c:c5:62:b6:42:6b:13:92:7b:71:1a:52:ac:f4:a1:
77:61:60:d7:97:73:13:d4:42:51:eb:fe:cc:28:45:bf:44:4c:
51:fa:29:7c:61:70:78:8a:9e:68:c0:dc:07:16:eb:97:d9:6c:
fc:f3:45:2c:48:8d:1b:b4:2b:e4:d1:f4:6e:7e:67:fe:c0:9a:
1d:e0:92:91:5b:4e:32:f1:ee:93:77:18:78:ba:25:b9:d9:2a:
94:17:e7:85:ac:ce:1a:50:bb:d7:61:69:47:11:79:f5:a0:c1:
c9:c5:e2:be:92:62:cf:ca:d2:d1:dc:e4:09:e6:d1:9e:29:e1:
59:bf:1f:ef:3b:a4:0e:9d:64:d4:2c:1e:c0:f9:59:dc:2f:77:
64:0b:78:c7:83:93:59:2a:02:5f:f3:b0:0d:eb:ac:4d:cd:2b:
eb:b0:fc:d0:8c:ac:b5:1f:a0:2d:63:1a:31:88:c2:89:47:99:
a7:ed:dd:ab:ed:41:c5:ac:cd:e9:b0:df:d4:88:f1:d2:64:3f:
08:11:58:64:ae:02:c0:62:f1:3f:54:9f:67:1f:5d:e6:af:9c:
00:ca:4d:a7:ce:0d:c0:1d:26:0e:27:06:56:a8:36:e7:26:60:
be:d7:b8:1e:b4:1a:8c:ee:58:32:33:da:40:d6:ae:59:03:c6:
3f:26:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:01 2025 by rpki-client