Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a8b534-c617-3ce3-b993-95ecfb4a217c.roa
File: 67a8b534-c617-3ce3-b993-95ecfb4a217c.roa (raw, json)
Hash identifier: gvsHh0Wj7Rd5y4lJYXUwsYxkJqFGuVw6/4VAJ0+otpg=
Subject key identifier: 05:32:04:C2:C6:67:9F:AC:89:D7:38:3E:80:F5:C7:E3:EB:E2:CC:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F3FA4ED9D8660269C952780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a8b534-c617-3ce3-b993-95ecfb4a217c.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:3f:a4:ed:9d:86:60:26:9c:95:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=5c1929b2-0140-4595-82b5-2d014c51a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:04:0a:ee:90:1f:16:f8:7f:6a:9e:49:c2:
6c:39:f7:27:56:ca:dd:c9:dd:1c:7e:8d:20:8e:76:
ae:5e:26:33:10:58:43:fa:58:e3:85:0a:6f:6c:7b:
e6:bd:a6:e6:ef:12:54:94:e5:bb:10:f5:f4:32:60:
ec:fa:0a:6d:27:f5:69:8a:5e:84:fc:62:e0:bc:80:
23:4b:6a:83:a4:8f:5b:50:0e:60:a3:97:98:8d:bc:
fb:3b:51:3e:db:16:ae:d5:ef:d8:c7:e0:05:f1:b5:
aa:44:53:57:fd:2d:f0:b4:23:02:20:33:6d:43:13:
d0:9a:8f:ab:0a:89:9c:a2:b6:10:53:67:2a:98:d6:
d4:68:a1:c7:f0:5e:ef:03:8f:2b:b4:07:e0:31:24:
fa:2b:52:10:9c:1f:73:bb:0e:98:5c:9c:66:43:de:
f1:95:7b:21:59:ce:41:71:c2:0f:6f:7e:57:75:0d:
0f:b6:64:64:f9:1d:5e:af:4a:be:39:a2:4c:b8:e5:
c0:9a:2b:8e:94:a5:d0:18:8d:e6:94:4d:3b:2f:44:
18:ba:df:0c:da:06:a6:24:e5:42:eb:46:5e:20:cb:
ac:96:5f:2b:f0:34:d1:2a:7e:36:be:f0:6a:f3:f7:
7e:b9:2d:67:72:97:ee:43:63:fd:2a:cd:ab:0f:dd:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:04:C2:C6:67:9F:AC:89:D7:38:3E:80:F5:C7:E3:EB:E2:CC:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a8b534-c617-3ce3-b993-95ecfb4a217c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:db:2f:71:fa:24:37:5d:53:1d:e1:74:15:45:e5:b8:43:b6:
9d:48:f5:88:7e:72:2e:87:64:26:87:fc:8f:8e:f1:d2:9c:d7:
fb:f1:7c:13:2d:ba:1c:07:ba:a8:93:5d:c8:9f:2f:d7:61:dc:
fd:5b:02:93:95:19:82:5f:42:91:40:ee:ce:17:c9:78:e4:4e:
59:ea:39:ed:2a:81:25:1d:8c:89:f1:1b:61:ba:95:78:32:21:
17:c8:34:43:a9:98:cf:1d:c4:a5:47:90:d3:f0:74:12:00:15:
7f:20:e5:67:39:da:5b:d1:07:d5:6e:2d:83:99:5c:97:c7:8c:
41:f1:5b:c7:bd:90:ca:eb:88:c9:00:90:d5:56:05:93:24:05:
e6:2c:bd:7e:eb:81:37:d9:41:0e:b8:8a:6e:76:b7:7c:b6:f2:
40:2d:18:5f:20:4f:bc:0c:ec:67:30:1a:ac:4c:3e:0f:e9:2b:
3f:33:8b:c9:8c:da:9b:a6:6f:63:de:a4:72:48:19:5b:e4:62:
92:b7:b5:90:53:47:1a:06:ac:44:e4:be:21:48:aa:40:2f:92:
2a:6a:28:23:2f:93:6a:47:b5:bc:13:62:5a:52:96:26:6f:5f:
9a:a6:c2:0f:9b:f2:b8:0c:f5:87:fa:00:1b:4a:16:23:9a:9f:
6e:d8:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:21 2025 by rpki-client