Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70041840-e001-3cc0-ab34-9ff7b771c2a9.roa
File: 70041840-e001-3cc0-ab34-9ff7b771c2a9.roa (raw, json)
Hash identifier: TH3iUmFCcePX+b92sAmBAy1EUJM48meJwoC0majrfpY=
Subject key identifier: A5:8B:A0:0A:8F:DE:14:CF:13:86:4F:E4:F8:D2:85:3F:74:1C:4C:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840404152DD451D41227E0C0380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70041840-e001-3cc0-ab34-9ff7b771c2a9.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:41:52:dd:45:1d:41:22:7e:0c:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=5c4cb5cb-2064-4877-bdd2-194a4e5bee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:9f:43:16:07:67:b6:b0:bd:9f:84:46:2e:
8c:a7:28:76:82:88:c0:ad:89:43:b1:80:ec:ae:47:
58:9e:c6:4f:96:45:1f:46:37:9d:58:90:9e:9e:4a:
5c:b2:16:dc:fe:1a:2c:78:70:5e:ff:4a:aa:db:ca:
f8:0e:eb:77:ee:77:f5:f7:4f:cb:f8:d7:b0:b0:03:
a8:3a:c3:17:58:48:12:44:d6:4a:01:27:f3:d4:64:
a1:a5:aa:4e:92:b5:0e:26:2e:1e:0b:fa:4d:7f:ea:
0e:fa:b4:cf:d9:26:c1:bd:43:75:1c:af:c3:d1:0f:
7f:e1:d0:4f:7e:57:06:1c:2c:7d:70:e1:04:15:5c:
aa:69:ca:68:3c:f6:e7:d6:2d:f4:e2:94:c6:07:20:
61:7b:1d:0c:55:2b:6b:1a:47:1b:bd:43:7d:f9:33:
58:93:a3:6c:bb:64:c0:46:d7:4b:c4:3a:86:5d:24:
54:8a:d5:6d:4f:a0:e5:b5:eb:91:09:93:01:52:2f:
8e:29:e3:c7:1b:7d:65:78:c6:51:76:f5:2d:9b:14:
6b:7c:86:ea:4f:df:ea:74:2a:e6:3c:ee:68:fd:24:
43:f9:b7:c8:41:0f:cd:d0:24:c9:64:c8:1b:69:18:
09:3d:cd:c5:b4:c7:28:70:13:2f:94:a9:49:84:3b:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:A0:0A:8F:DE:14:CF:13:86:4F:E4:F8:D2:85:3F:74:1C:4C:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70041840-e001-3cc0-ab34-9ff7b771c2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d4:4e:6a:46:3c:4c:70:a0:19:9e:96:5d:a2:9a:58:15:8a:
5b:77:5a:73:79:0b:3c:87:47:14:ae:0f:4f:86:44:e5:2a:8e:
8e:1a:c4:a3:c0:e1:c3:59:51:5b:ed:53:7d:d4:12:45:1f:8d:
a5:0f:25:3c:54:14:e7:4b:14:0a:2a:04:df:c9:e6:57:8e:d3:
c9:bd:02:2b:65:f8:80:42:7e:6d:21:d9:f2:12:e5:a4:b0:2d:
23:03:26:7f:3b:f6:3c:3c:7d:6a:14:33:12:50:65:c0:ce:80:
64:4d:e5:f1:e1:ec:c7:47:f4:7e:c9:eb:51:42:48:63:97:60:
5b:92:b7:bb:19:ca:34:dd:00:3f:17:73:8b:6d:b9:4d:88:ef:
b6:c4:6a:df:19:aa:16:18:1b:8c:56:01:fe:dd:55:ec:f1:37:
78:fd:d9:a3:97:60:55:50:cd:91:56:2c:28:c4:09:ba:94:89:
63:4d:c5:69:d4:f9:2e:f8:02:03:c3:69:e2:6d:50:9c:6e:a3:
ec:db:79:27:d0:a6:8b:48:88:50:87:17:30:ca:d5:c2:63:df:
38:fc:10:49:ed:85:96:67:83:8c:27:66:fe:ff:7f:56:d9:d3:
37:3a:15:25:cd:14:6e:27:9d:76:08:71:50:87:09:78:88:66:
a0:1f:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:56 2025 by rpki-client