Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a8b390d-f14c-3204-b738-7135e7c2a9fd.roa
File: 6a8b390d-f14c-3204-b738-7135e7c2a9fd.roa (raw, json)
Hash identifier: n0/2KTHn3cAckO549zg4dxlkpL/LWHLWM+QOB4RhLjU=
Subject key identifier: 00:42:7D:18:DB:DA:55:E1:5D:37:27:80:4A:E7:A2:34:1D:B4:D9:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB95EAD3A5ECEB29D45C4357
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a8b390d-f14c-3204-b738-7135e7c2a9fd.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:95:ea:d3:a5:ec:eb:29:d4:5c:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=e977ee03-cce9-45e0-a39d-495ad7212203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:e0:97:9e:c9:6c:ed:f0:54:55:82:5a:a5:
cc:88:d4:51:0e:18:dd:e1:12:e0:e4:d5:18:cd:11:
9c:d7:af:1f:2a:e9:63:d5:06:3a:c9:ab:9a:3b:ce:
f3:c5:bb:f1:99:a1:07:46:b6:ab:fb:46:be:bc:fb:
69:6b:73:10:ae:1e:ae:7b:90:9b:72:b2:7e:86:9e:
09:5f:52:2a:b8:eb:3b:8e:c1:cc:a2:ae:89:ef:31:
48:d4:ce:db:d1:87:6d:53:0b:8b:af:8d:d3:07:f9:
ae:89:45:1c:da:ca:4a:ae:33:51:43:f8:32:01:61:
c6:21:40:b9:f6:d9:ed:d8:af:39:4f:69:37:11:c8:
c9:f2:f1:f4:72:48:93:bf:38:69:53:a4:bf:b3:bd:
f6:0b:1c:94:4d:d7:c4:95:28:08:23:42:e3:5f:2d:
3d:81:9a:3d:b1:1b:56:aa:cc:72:85:b8:93:b7:76:
06:df:d6:45:b8:93:e9:ee:79:ce:78:46:20:32:31:
f7:7e:39:aa:72:99:e4:f7:dc:71:42:9f:3f:a2:b0:
78:d3:e3:5d:23:b5:91:e7:90:d4:89:dd:d5:96:fe:
bd:4e:45:9d:33:da:b0:35:25:0b:dc:db:7c:9f:46:
4d:19:2a:4b:d8:42:0d:e3:d1:2d:b7:cf:49:33:0d:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:7D:18:DB:DA:55:E1:5D:37:27:80:4A:E7:A2:34:1D:B4:D9:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a8b390d-f14c-3204-b738-7135e7c2a9fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:e2:fc:db:4d:84:3e:30:36:78:0f:7e:da:1b:27:6d:8a:
c0:f9:c6:d2:38:e5:17:b0:73:95:a2:6e:f8:41:6a:1b:84:b3:
9d:fd:8c:53:9c:12:d3:ed:7a:a2:8d:27:9b:91:9b:04:18:6b:
32:1b:59:64:18:cf:d8:27:42:c1:dc:8b:c3:c3:0a:32:61:69:
46:29:7e:f9:f7:ba:cd:1a:eb:ce:de:70:64:b4:e3:01:b4:34:
de:73:da:a6:b8:9b:45:d2:31:f7:7c:a3:4b:59:5f:d3:5f:f7:
4c:ca:10:bd:4d:65:f9:20:39:4a:3f:86:08:be:18:db:28:75:
fd:98:af:85:13:73:f4:fb:61:2e:32:03:f6:65:db:82:fd:d6:
4f:79:57:46:7d:96:b5:8d:a0:51:74:4c:e7:28:df:7f:1c:10:
53:3a:71:66:c9:00:69:a5:bc:3a:4d:cd:66:cc:9f:ea:b5:2c:
bc:b6:a0:98:b5:c0:6e:0f:67:40:7a:4c:e3:01:be:25:61:ea:
c3:e7:c1:cc:ea:cd:e8:73:cb:c4:cf:d9:0d:fc:23:64:ce:61:
9a:7f:78:73:9a:6a:b1:0a:60:88:b0:45:d8:4a:e2:85:17:cd:
a2:41:fa:33:ee:da:8b:e1:ca:04:c8:57:0e:48:be:11:ce:fe:
d2:73:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:54 2025 by rpki-client