Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb11d73-57bf-3497-829d-7674423f07dd.roa
File: 6cb11d73-57bf-3497-829d-7674423f07dd.roa (raw, json)
Hash identifier: /QJr4tWZUmMUoNUqMnUIvKXQrKDeKk1X5hN7k7FQWNY=
Subject key identifier: F5:67:B9:D5:B4:F3:9E:FE:A9:AB:74:98:0C:97:E2:7F:70:F3:8B:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBEE151EAEB6B07EB805DAA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb11d73-57bf-3497-829d-7674423f07dd.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:e1:51:ea:eb:6b:07:eb:80:5d:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=cae5a40d-07d7-4c77-8d8e-39bfa0c5225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:27:bc:b7:82:67:98:36:16:69:22:8c:fa:
ef:36:53:08:16:12:93:2e:e7:4e:ef:ef:ae:01:cc:
b4:05:b7:28:ee:3e:f4:e0:45:3c:fc:8c:83:79:ff:
63:9d:1b:2f:cd:ea:c6:2b:a1:71:cc:62:ab:66:c3:
a0:a4:bf:d6:c2:87:8d:77:6f:10:2a:7e:73:04:dc:
57:c7:03:5c:ad:59:cc:ef:b0:5f:98:c3:26:54:ee:
38:6e:73:84:f6:51:86:1d:58:33:07:dc:84:79:2c:
20:9d:22:33:60:38:94:fc:a5:20:67:f9:a9:e3:a9:
07:52:d3:46:44:37:90:57:7f:48:8f:f7:92:02:68:
46:0a:9b:2d:b7:58:ff:a1:7e:1f:3e:64:b7:ab:02:
6c:7c:46:a0:16:1a:a0:fc:fb:da:7a:53:20:04:4b:
04:28:b1:4a:bb:25:4f:2d:28:b6:20:46:e3:b4:ce:
99:66:49:1b:d5:66:e1:a9:cb:ca:4b:46:1c:d1:26:
2c:50:52:03:ef:60:23:5a:81:f6:6d:38:79:91:bd:
b2:67:ca:ab:c7:01:c4:83:7f:ef:9e:8a:a0:23:2b:
97:6e:ce:64:e0:14:08:5b:2d:2a:f1:3c:cf:fb:c1:
c5:12:82:0e:2a:5e:22:71:30:b1:5a:64:5b:6e:46:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:B9:D5:B4:F3:9E:FE:A9:AB:74:98:0C:97:E2:7F:70:F3:8B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb11d73-57bf-3497-829d-7674423f07dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e7:3d:59:cb:37:d2:46:9d:2c:63:1f:d1:25:7f:82:e1:de:
bc:28:f1:1b:c0:08:ad:93:12:5f:46:2a:e7:59:73:97:ef:d4:
fe:6f:58:01:17:f4:30:5f:49:46:13:71:c6:1a:9c:8e:3c:2f:
a0:27:93:2b:77:0c:93:1a:0d:c5:b8:f3:af:eb:5b:be:08:ac:
15:35:2c:c7:a6:19:2d:95:da:a9:a6:b6:88:bb:b2:f2:0a:97:
cd:0f:f1:86:28:ed:3d:39:17:a8:0a:c9:33:e2:33:37:b4:0b:
10:ab:1c:43:4b:3a:4d:05:b5:c5:80:39:77:22:79:14:52:aa:
1b:c8:b7:a8:f8:48:ce:24:39:2f:a7:e7:b5:33:87:41:7d:18:
f4:e7:ff:12:3b:d7:b6:2c:03:4a:fd:17:0f:a0:e5:ad:d0:fa:
93:14:64:11:72:0a:b9:b0:ef:68:8c:af:25:26:52:a5:04:61:
17:b2:17:c4:7a:0b:0f:3f:2d:07:5a:b2:39:4e:24:3a:64:68:
04:da:fe:6a:40:81:e5:15:75:9b:98:1c:79:f9:13:2f:59:c3:
61:43:f0:7e:01:fa:79:aa:ed:e4:cd:19:07:c2:7b:f2:a3:54:
ad:1d:09:99:85:bb:a2:aa:10:fd:f5:df:0c:4e:56:9c:65:60:
10:e5:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:24 2025 by rpki-client