Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63f36249-f4ab-345b-80c4-06d8973b1e39.roa
File: 63f36249-f4ab-345b-80c4-06d8973b1e39.roa (raw, json)
Hash identifier: 4Kv9T5I4dRV3dBFlZu70WJujf4UtijWiJgG7TuGSyOQ=
Subject key identifier: 66:60:63:6A:BF:3A:55:75:3F:EC:5C:82:13:04:12:3F:1D:F6:91:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE3D5631A4E92A0E96432090
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63f36249-f4ab-345b-80c4-06d8973b1e39.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:3d:56:31:a4:e9:2a:0e:96:43:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=474af68a-5742-42da-b19a-e61f5c971e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:a2:6a:b6:ef:48:91:d0:cd:7f:07:3d:91:
5a:80:d1:bc:ac:5c:14:eb:c6:62:de:23:f9:93:55:
97:7a:04:a5:8f:3a:a9:b6:53:6b:7e:cb:02:28:f6:
11:9f:16:ee:e2:e8:9f:70:64:12:45:04:c9:13:d3:
57:22:fb:b1:5c:ff:8f:64:c9:48:bd:50:2a:22:71:
cf:ea:62:bb:19:c3:59:d0:e4:87:53:d5:bd:21:30:
ca:bd:09:7c:59:6e:09:c7:ab:8d:2d:44:c7:b0:9a:
6e:85:23:c2:68:74:ce:92:c2:83:90:c5:1d:7e:bb:
d2:ce:0f:d1:6a:67:1a:5c:b6:a2:83:f9:ad:d1:11:
aa:e8:83:0b:c2:38:15:3c:4b:a0:10:89:8a:a4:e9:
39:82:84:ff:13:13:10:e3:1c:b3:e4:1d:c7:27:a3:
e2:eb:98:e8:7c:64:9b:64:dc:e4:a7:f4:05:18:a6:
29:e6:36:34:e2:dc:a7:3a:97:6a:fb:63:9c:ec:d3:
47:15:0f:90:9d:70:17:37:6c:72:57:74:e1:17:44:
4d:ef:05:36:4a:25:d6:06:8c:2a:18:12:35:ae:2a:
11:91:e2:99:9a:2b:68:dc:14:8e:7f:07:57:07:ac:
58:22:61:b3:f2:e2:84:24:19:31:18:d5:f7:3c:06:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:63:6A:BF:3A:55:75:3F:EC:5C:82:13:04:12:3F:1D:F6:91:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63f36249-f4ab-345b-80c4-06d8973b1e39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:15:a9:0f:77:0f:27:9f:6f:90:1c:1b:4b:36:ef:29:47:9a:
20:2a:6d:7e:0a:45:cb:c3:b9:33:48:03:f8:ea:59:a9:53:f9:
d1:e0:88:aa:c9:f7:dc:82:e4:b6:1c:22:37:1b:89:b9:99:e9:
9d:c6:7a:10:57:14:08:89:97:1c:1a:18:e7:36:7c:96:5c:0e:
60:e9:bb:27:3e:4e:7f:1b:6d:c2:2b:a5:df:16:48:f5:72:93:
f5:cc:ae:48:69:69:61:95:13:d5:0f:f7:16:36:a9:e9:b5:7f:
40:ae:82:79:5c:74:7b:24:39:6f:20:63:46:89:0a:d4:1b:bf:
6c:d4:6a:7d:78:46:5a:4f:2b:f5:5f:eb:8f:5f:55:50:4e:76:
19:c5:b1:96:fc:f7:d2:fb:a8:1b:ac:55:b0:5b:83:88:0c:f1:
e3:ce:4d:9f:10:d7:5f:fc:20:aa:fa:e8:3a:6f:f1:43:58:76:
f4:d2:dc:da:dd:07:85:77:a0:1d:69:a0:77:67:89:f7:93:9a:
a8:f7:33:04:8f:64:5c:b1:d3:48:86:41:93:4a:54:51:c1:97:
e2:6e:09:94:ba:0c:f7:b7:5e:3c:0d:ae:44:db:8a:25:a3:46:
17:79:17:c8:db:7b:c1:65:1c:ca:f3:b9:6f:bb:47:bd:a4:f9:
4b:b1:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:35 2025 by rpki-client