Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d818766-29f2-3901-8fd9-2189f6ed7a9e.roa
File: 6d818766-29f2-3901-8fd9-2189f6ed7a9e.roa (raw, json)
Hash identifier: 9tiJBBGxI57eKjXBwaLS1ii4bINOBIsxu8Zw7flATdU=
Subject key identifier: E0:23:A8:70:E8:F3:92:4C:5C:38:1C:8A:3D:4E:93:9C:AB:AB:F8:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7C1DC92C0078AD0A3A89C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d818766-29f2-3901-8fd9-2189f6ed7a9e.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:c1:dc:92:c0:07:8a:d0:a3:a8:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=2d7bd629-3d27-45cf-99a7-5a03a6a07489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:4e:30:4c:85:1b:28:9d:87:1e:e6:5f:2a:
0f:66:df:ec:c0:33:26:6f:72:cf:03:65:75:3b:39:
d9:07:65:c3:43:a9:a8:25:0e:55:0b:4b:f8:af:4f:
cd:d4:d2:18:ab:76:97:00:4b:fd:7a:dd:be:7c:6f:
04:b7:40:22:80:f9:4d:a6:19:ed:fa:ad:07:0e:8b:
59:ac:07:b8:d3:db:0d:30:58:0a:b0:7f:80:25:d2:
28:e9:07:bd:a0:31:ee:66:4a:a5:05:3a:a6:12:83:
40:ab:bb:6c:45:ba:63:0c:69:96:28:16:cf:d9:a6:
b5:5a:9e:54:84:e2:f0:d0:85:aa:bb:e7:e9:0a:a7:
9d:39:f1:44:e0:3d:05:8a:32:94:66:b5:56:b0:8c:
5a:a3:30:6e:59:3e:99:92:c7:3d:4f:d9:31:e8:51:
5b:5b:c5:18:a8:67:3d:8c:27:2c:a1:48:3c:9c:fd:
21:87:92:d2:1e:20:94:54:84:1a:ca:d2:f5:2c:db:
b1:a6:f5:5b:bb:49:4b:78:a8:66:6b:ce:55:fc:80:
73:83:75:12:43:e7:11:93:46:ef:36:4d:e5:6d:7b:
52:65:02:22:be:52:54:92:08:b2:50:bf:69:05:b7:
2e:63:1c:78:a4:f9:7c:6c:26:39:17:60:d3:f2:c5:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:A8:70:E8:F3:92:4C:5C:38:1C:8A:3D:4E:93:9C:AB:AB:F8:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d818766-29f2-3901-8fd9-2189f6ed7a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:15:5e:ea:b1:c8:83:1d:83:7e:ae:a6:5e:c7:ea:4d:4f:59:
fc:2d:8f:01:e3:d2:53:af:93:6b:c1:d9:36:83:5b:04:a4:61:
65:55:c9:80:59:b7:86:5e:8f:ee:3c:05:3c:c9:8c:b3:6d:67:
7c:7c:ec:60:aa:92:98:03:4d:f1:a0:65:2d:26:f8:e6:12:d8:
ca:f9:66:27:46:02:40:02:85:99:28:94:27:07:82:44:f2:04:
b5:c2:b7:09:81:a9:66:2b:58:b4:9b:12:f7:3a:89:e5:5c:75:
3e:a6:49:8f:95:51:a0:2f:f1:90:2a:c1:8e:f7:bb:de:24:20:
92:d9:6b:6e:24:f4:6b:35:1d:bf:1f:05:d7:8b:8e:c8:4c:1f:
e2:84:30:f7:d9:05:4c:0e:73:a6:0c:dc:49:58:e7:95:22:8f:
5f:9b:94:c4:25:11:c3:55:6f:89:ed:ba:8b:d6:42:e4:49:d0:
ab:0b:b2:a6:91:30:4e:b4:22:6d:e0:7f:38:43:9d:7c:14:00:
d3:69:66:4a:99:0b:57:ba:fa:18:d7:bb:c2:5d:f3:14:c9:ab:
de:fd:00:2f:56:ab:8f:c5:b6:03:ce:c3:88:e1:9c:69:1f:b0:
b9:2b:8f:20:92:43:f9:fb:13:2b:e3:43:9e:a1:42:1b:7e:e6:
86:98:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:15 2025 by rpki-client