Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6723eafd-98a2-3607-a5d0-420566ca0dbb.roa
File: 6723eafd-98a2-3607-a5d0-420566ca0dbb.roa (raw, json)
Hash identifier: 0Ez9jALAE+e8XsiGVIIQvLhk6aw7SITwjzu62gmUlJM=
Subject key identifier: 7D:DA:8E:76:EC:8C:5C:30:F4:97:81:BE:A8:6B:B7:57:3E:16:BD:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584040325FA308603327B2B4CF30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6723eafd-98a2-3607-a5d0-420566ca0dbb.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:32:5f:a3:08:60:33:27:b2:b4:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=d4bdd8fd-c61a-4c55-a887-1b2ea73cd72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:ba:c7:29:e1:86:37:71:47:ab:25:6b:4d:
6f:fd:68:0e:86:f9:9b:e0:21:ea:e3:9e:08:f5:8e:
50:ab:0c:a6:40:22:8e:dc:ad:35:3d:ab:dd:04:ce:
67:3a:e8:a2:6d:2c:b4:b6:31:a1:c6:fc:38:52:78:
48:7a:94:ff:3e:5a:40:eb:64:2b:fa:3a:c0:3d:59:
75:a2:5b:ff:a2:ea:13:d8:24:7f:73:51:2d:21:61:
36:9b:82:22:c3:8c:99:78:e9:4a:49:6b:98:a1:e7:
53:87:fc:63:a5:98:0a:6d:29:72:0a:e7:9c:f6:6d:
eb:23:f4:5a:2a:8c:e9:d0:2e:ae:05:b0:d6:d0:21:
6e:87:a0:3e:e1:03:46:f1:19:bb:60:61:9f:d5:57:
bd:ee:8f:b9:a6:33:9d:23:44:9b:c4:1e:54:a0:11:
34:54:31:c1:68:9c:c3:61:df:dc:17:1d:a3:c0:8b:
5d:dd:1b:c1:4d:ed:e8:97:94:9a:97:f6:83:63:4c:
f2:8d:2b:0d:43:6f:55:51:df:37:cf:56:81:36:a4:
2c:7d:5b:bc:27:d1:42:10:32:c9:a9:1a:f6:ef:9a:
98:d3:30:6e:2d:c7:9a:5a:ec:60:46:6b:04:5a:79:
02:d5:d1:76:00:a3:94:cf:df:03:c5:d1:10:ae:ac:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:8E:76:EC:8C:5C:30:F4:97:81:BE:A8:6B:B7:57:3E:16:BD:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6723eafd-98a2-3607-a5d0-420566ca0dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:09:51:4e:82:df:cc:c8:d5:67:59:ff:3b:f8:d6:3c:0e:64:
e5:78:8b:ef:9e:cf:a8:e1:e7:1d:cc:a7:9c:96:a0:ca:08:11:
97:8a:44:44:12:e3:96:3b:ef:46:04:9f:3c:de:38:55:4c:26:
73:70:c7:60:ec:1d:e0:d8:1b:81:50:f7:a9:3a:84:ee:8e:20:
0f:dc:40:69:10:01:f1:16:73:50:4a:68:f0:9e:64:58:88:70:
55:64:82:02:d0:62:2d:f6:6f:b0:b9:70:28:74:54:a7:08:42:
e1:1f:da:e9:7b:7b:1c:b0:fc:48:2d:88:cb:c0:39:12:c4:be:
d1:1f:07:7f:03:9e:60:c2:c7:a0:83:f0:22:b2:49:98:a5:eb:
59:47:a4:c1:4d:74:6f:d6:7f:ce:3c:c5:d5:53:ed:a3:3c:c2:
80:6d:ae:37:d0:86:f2:50:b7:a5:59:ce:c4:ab:82:10:84:2a:
8e:cf:f0:f2:a8:23:11:59:c3:d7:d4:08:e5:5f:fc:39:06:6e:
dc:78:f0:41:05:f8:ee:a9:f6:c4:e9:92:d6:1d:58:b0:71:bb:
a5:eb:5c:37:bf:f0:bc:27:a6:88:24:d9:93:c6:3d:b1:af:1a:
c3:87:87:b1:65:65:d9:11:23:db:12:a4:ef:a5:46:32:89:ab:
1a:4d:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:15 2025 by rpki-client