Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/672695d0-1dac-3fb7-b0cf-a6120305b94e.roa
File: 672695d0-1dac-3fb7-b0cf-a6120305b94e.roa (raw, json)
Hash identifier: AbiCdJ3Hd61kD5SbmUzZFwLIFT4C7UA+qzSsqxKYPds=
Subject key identifier: 53:43:BE:4E:F9:53:FB:34:7B:66:3E:9C:C9:3C:00:34:9C:20:02:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF82A17B8667F7D4D84AC9FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/672695d0-1dac-3fb7-b0cf-a6120305b94e.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:2a:17:b8:66:7f:7d:4d:84:ac:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=a2040237-cbbd-4849-92c2-1ab5ec4ae142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:25:a4:6a:37:e5:38:c2:41:44:f0:fa:a9:
42:99:50:43:c8:c6:25:9a:18:8b:70:2c:a8:6d:4a:
8f:8d:49:cb:e7:31:8d:46:38:8b:05:de:da:a3:ca:
dd:ea:23:0a:0b:73:91:8a:11:9e:85:5f:6b:1d:5e:
aa:c2:f1:1f:36:a3:66:5f:be:b4:3e:42:0c:07:c5:
2a:7e:59:3b:32:7c:16:27:4d:fc:4b:4b:4c:8c:5d:
af:98:14:14:77:fc:c0:6f:dc:91:11:af:d4:52:95:
b8:b1:46:16:e5:5d:a0:9b:a6:bc:86:54:9c:45:7b:
6b:b1:88:84:ee:10:8b:5b:ba:f3:c6:02:9f:3d:3a:
0f:6a:68:81:02:79:e8:de:b5:b1:b7:56:a3:0f:be:
e3:95:db:54:29:e7:b0:59:b3:78:8c:d1:48:74:76:
48:3e:64:a0:c6:8d:58:02:fd:c6:ca:13:8c:94:f5:
61:b6:9f:5e:7b:b9:b3:7c:9b:d7:8b:7a:cc:3e:a1:
be:db:54:52:f8:7f:a9:db:03:eb:ec:cf:a5:8e:60:
ba:72:94:3f:92:1c:70:64:92:6b:ac:da:90:43:db:
99:e6:c0:10:de:4f:a6:ac:47:b7:a8:e6:91:63:ad:
6d:24:bd:29:71:5d:bd:3b:62:c6:77:af:a3:02:9e:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:BE:4E:F9:53:FB:34:7B:66:3E:9C:C9:3C:00:34:9C:20:02:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/672695d0-1dac-3fb7-b0cf-a6120305b94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9a:79:12:8f:68:99:94:4f:11:1c:17:b4:cf:c2:da:a8:3e:
91:19:8f:41:b4:2b:23:8d:d5:e8:49:9c:3c:75:2d:f6:f4:69:
ab:ba:ce:2a:ff:a3:a0:48:4b:4d:e2:67:09:67:e0:5f:fe:1f:
94:05:f7:02:84:ea:85:a9:71:76:58:45:99:ae:db:f7:4d:4c:
bc:59:33:bb:2e:33:d6:1a:29:ad:12:70:45:11:9c:bc:1b:89:
8d:32:07:0c:43:81:da:89:34:9b:bd:4b:bc:80:82:fd:2b:cf:
bb:0e:0b:2d:3d:9b:ce:b5:ad:90:7e:8b:fa:4f:38:e4:5e:53:
82:4a:21:a9:af:19:ff:c1:95:c3:43:54:25:9d:13:86:cd:9a:
6c:55:4d:5a:b7:f2:61:43:f2:ba:b3:d2:e1:1a:70:d4:0c:07:
76:dc:2c:86:7f:fc:40:3d:d8:cb:8e:64:7e:9d:c8:b8:6d:3f:
46:03:5b:e9:60:58:e1:37:ec:bd:a7:76:24:77:28:cb:1e:5f:
9a:02:a6:26:49:76:7d:a8:a0:3a:f8:35:33:b0:d0:7b:cb:11:
e5:1a:7f:31:42:cb:d4:c7:2b:3f:75:ab:ed:93:66:68:a0:a5:
13:33:9f:68:48:d7:c6:f0:db:bd:d5:66:18:9e:77:7c:35:ba:
8c:5a:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:11 2025 by rpki-client