Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6611bd11-ffab-364d-b93f-68fcaf26bd96.roa
File: 6611bd11-ffab-364d-b93f-68fcaf26bd96.roa (raw, json)
Hash identifier: k9ztBhWPDzl64dq3eKumX2VVmiGLdyJtM4cb+AQagiQ=
Subject key identifier: 49:4A:0E:8C:5A:92:1F:69:40:C9:C5:E0:B6:79:40:0D:F2:4E:C4:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D63509A4C0015896DB15C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6611bd11-ffab-364d-b93f-68fcaf26bd96.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:63:50:9a:4c:00:15:89:6d:b1:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=acbb0d02-5e72-45d6-bdcd-a39f362a813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:34:73:2c:c4:8c:de:dc:fe:1a:fa:51:2a:
9a:cf:4b:0d:ad:1c:cd:38:6b:25:7a:43:ed:39:4c:
58:5f:b3:60:71:64:26:bd:b5:89:05:31:13:a0:a5:
ee:4b:a3:ed:0b:aa:05:10:39:b4:e3:76:55:ea:bb:
9e:a9:91:b6:ef:eb:c0:de:d6:b9:f2:48:a2:a2:39:
98:97:81:7d:77:b2:03:b7:1a:eb:1b:e2:2d:24:09:
d8:49:12:10:19:c7:f8:b6:55:b7:5a:64:22:46:77:
0c:29:c1:67:30:79:7c:2f:ee:60:83:82:b1:d6:d8:
0f:56:fd:03:ac:fe:ec:0f:59:3a:a2:06:cd:da:f8:
d2:85:7d:e3:ff:5e:d8:01:44:cc:b0:09:e7:e9:6d:
1a:29:2d:99:cf:b3:31:b1:4f:a1:a8:54:f3:a8:60:
8d:4d:ba:08:1b:79:26:1b:d8:86:cf:be:da:21:e6:
38:46:81:48:d5:bb:06:0d:fd:22:82:db:d1:e2:f4:
96:16:77:08:eb:64:e5:c0:a1:62:7d:9d:2c:01:e7:
f5:f8:53:cb:c8:de:c2:61:d2:94:61:3e:86:02:a5:
08:c6:0d:ca:40:51:d1:a3:0b:9d:0f:5b:f6:dc:9f:
1a:df:91:f4:ca:59:43:45:e2:80:e7:f9:9e:ff:44:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:0E:8C:5A:92:1F:69:40:C9:C5:E0:B6:79:40:0D:F2:4E:C4:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6611bd11-ffab-364d-b93f-68fcaf26bd96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:08:72:c0:95:29:24:6f:0e:93:36:28:07:61:df:87:db:3a:
c2:4e:0d:ae:77:a2:c3:7a:ab:e3:ce:d8:eb:e0:7e:95:32:0c:
ce:42:59:45:ff:d1:e8:8c:30:b6:a1:bd:26:f0:21:62:ba:7a:
51:96:82:79:a3:1f:ed:fe:8e:7f:da:2e:f1:45:19:7d:5a:20:
35:b5:71:d2:7a:d3:70:0f:3f:82:70:22:c6:3e:38:71:3e:d5:
45:40:70:8d:f8:1a:8b:13:ad:2c:57:36:35:f9:f0:f1:9c:a8:
21:30:a5:67:e3:4c:a5:b1:f1:fb:f9:07:a5:f5:c2:5a:22:ce:
15:bb:6d:04:9a:8f:0b:84:9d:d5:95:4d:d7:58:03:85:e0:f7:
68:0f:c0:8c:d0:a9:75:7d:e5:26:b7:24:f5:60:15:aa:87:63:
ef:6e:37:c1:2b:fb:94:de:ec:2a:28:48:b8:08:8d:8a:5f:b4:
45:99:cc:03:13:3f:65:e1:e4:67:9f:06:05:fb:3d:ed:c9:5c:
15:32:f9:34:82:c1:4f:68:f2:a8:bd:3b:30:24:c4:18:e4:f9:
5f:85:36:f3:20:a5:fb:69:68:f2:37:09:36:c6:6b:1e:77:30:
ce:ba:15:2e:44:fa:35:ce:c4:e3:74:6c:a9:8c:12:ca:99:76:
3d:df:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:47 2025 by rpki-client