Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6bf25d45-a654-38c5-a22a-ca9e4a8d2ab8.roa
File: 6bf25d45-a654-38c5-a22a-ca9e4a8d2ab8.roa (raw, json)
Hash identifier: yvLjGgtC7G5DJuA3fQ/+gyRFI3Tty1Rc3myKzfdwLXA=
Subject key identifier: AF:F0:D3:39:9D:9C:0B:6A:78:FD:74:A6:DA:7A:FE:6B:A5:5A:D7:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAAA2E415E8DC3B62421C3660
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6bf25d45-a654-38c5-a22a-ca9e4a8d2ab8.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:a2:e4:15:e8:dc:3b:62:42:1c:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=be9952d9-f9e1-407a-9213-317f5900f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:f5:15:08:36:47:a0:a4:fe:c9:35:a1:2e:
02:d1:93:de:65:e4:6f:79:5b:2c:b7:e9:20:e6:d7:
fe:a6:4e:4f:fc:2f:d2:e9:90:3a:8d:65:49:3b:7e:
5f:47:cb:65:ec:84:a6:fd:00:10:aa:f6:eb:fe:9b:
69:c7:5f:70:06:c7:7d:69:d6:c8:fa:5f:78:03:14:
8f:43:3e:37:f6:d7:78:7b:19:ef:75:d9:14:55:dc:
4a:86:25:1e:49:a4:15:6e:47:f4:d6:f8:5e:f1:a5:
82:74:da:83:bc:c2:74:2d:97:e4:97:40:18:21:99:
ee:4c:fe:36:74:f0:e1:55:8f:2c:fb:05:64:86:43:
d2:75:6a:83:e6:61:bc:53:1c:a6:aa:71:a1:0e:94:
96:bd:fb:1b:21:38:e4:3b:fa:7a:b4:b0:59:3b:be:
2b:f5:ba:79:16:17:28:69:05:f4:41:d3:16:de:08:
3d:10:64:76:27:df:37:8a:67:0e:66:f9:82:3d:44:
ad:5a:53:31:70:33:5e:20:9b:09:d8:41:14:ca:81:
19:32:ba:fd:22:96:5a:5c:8e:84:65:57:f0:b4:56:
62:92:8e:eb:5d:4e:c2:c7:75:46:60:f2:f0:2c:3e:
55:05:fd:d7:ba:de:b7:3a:d8:43:cd:42:14:68:48:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:D3:39:9D:9C:0B:6A:78:FD:74:A6:DA:7A:FE:6B:A5:5A:D7:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6bf25d45-a654-38c5-a22a-ca9e4a8d2ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d1:1b:2f:ff:4c:4a:f8:d8:69:4c:05:46:52:d5:4f:17:d1:
29:6d:36:8a:d0:70:7a:ed:c6:e2:81:6e:3f:07:55:42:ec:41:
62:53:63:f5:31:4e:4a:03:50:33:64:6e:64:18:9e:a5:10:0c:
80:d3:3c:f4:9a:a1:51:e6:21:31:1e:41:32:5c:a4:1e:61:f9:
41:92:4e:a4:1a:a9:e0:bc:b2:76:57:d8:ac:41:d3:71:05:3f:
7b:92:bd:93:78:6b:d9:53:e7:64:8f:cb:d2:45:b5:a4:71:93:
8e:5f:0b:79:96:50:af:bf:94:c6:2b:26:1b:41:65:fc:4b:c7:
90:7f:13:25:c9:b0:c4:53:3b:73:e2:bc:78:13:d8:6a:aa:c2:
92:eb:81:5b:0f:1d:06:6c:19:3c:f8:9e:d5:32:0c:77:80:43:
08:fb:db:e6:5a:27:49:df:72:6a:4b:fe:bd:c2:c7:33:38:15:
db:1a:df:5f:ac:71:c8:8e:5c:ed:9e:a8:fd:6c:a9:d1:8a:90:
8f:ab:48:4f:61:7d:ed:b5:90:4d:dd:e4:99:ce:24:64:8c:bb:
3b:f7:31:0c:f7:fc:4e:42:78:47:9e:d7:55:5b:28:dd:91:75:
52:ec:32:d8:81:86:a4:5d:61:60:98:eb:8e:be:17:7f:47:f0:
0c:4a:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:55 2025 by rpki-client