Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75878cac-ae7c-35b6-8ce8-fe1c207acdf3.roa
File: 75878cac-ae7c-35b6-8ce8-fe1c207acdf3.roa (raw, json)
Hash identifier: ax7PWPzTD4I7xj87B7S71Mdbg2m99bRUBokep6LVtPk=
Subject key identifier: DA:42:3E:F7:CC:DA:45:0C:33:B3:AC:47:97:4B:41:87:E0:8E:01:85
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1B10265E019D8F4307A3100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75878cac-ae7c-35b6-8ce8-fe1c207acdf3.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:b1:02:65:e0:19:d8:f4:30:7a:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=994da6dc-463d-4974-9f12-998129db8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:f6:14:90:3a:af:d1:33:b3:dc:af:b6:87:
0a:6b:71:59:ff:bb:5b:6b:70:eb:24:2c:4a:e5:a0:
86:51:82:04:64:41:a8:13:3c:bd:e7:06:1b:20:77:
c5:72:77:dd:3c:df:68:ef:1c:79:cd:40:6d:7a:b3:
42:1e:47:6d:b8:be:ef:3c:83:c3:38:80:80:4d:e4:
a1:60:79:2f:11:89:a7:90:e1:9d:d8:7b:e7:3f:8f:
19:59:6b:d7:64:f6:63:19:cd:9f:66:9a:42:61:be:
30:55:85:db:30:26:8a:b3:cc:62:0d:03:a3:fd:7b:
e2:49:9a:86:d5:9c:2f:f5:4f:40:5c:b8:55:d4:b1:
6c:5a:b1:b2:bf:d3:fc:38:f4:3c:e6:28:29:26:b0:
1a:54:ee:ff:79:84:bf:25:c0:28:a1:c9:c4:97:e8:
e5:d7:a1:8c:2d:17:cb:7f:08:ff:68:5b:4b:77:7b:
16:53:80:68:b2:89:58:1c:a7:fd:01:d1:59:b3:4b:
8d:c1:73:09:b8:2c:61:74:97:99:32:e2:bc:a0:f0:
2a:7d:99:b1:4a:3e:9a:e8:98:28:4a:a3:32:69:6c:
de:6f:13:5a:4f:95:d7:e0:7d:19:b6:3f:36:43:5c:
4b:55:67:7b:50:0b:25:53:ae:06:46:df:b6:e6:21:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:3E:F7:CC:DA:45:0C:33:B3:AC:47:97:4B:41:87:E0:8E:01:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75878cac-ae7c-35b6-8ce8-fe1c207acdf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d1:85:df:6e:0a:9b:34:da:f3:4f:5d:ef:6d:d7:05:01:b6:
61:69:75:37:b4:2b:b6:62:8f:cb:53:f2:83:80:c5:21:67:21:
d6:1e:e4:92:95:6d:9a:12:06:01:48:d5:45:a6:ae:9d:93:10:
39:ac:be:15:de:61:03:2e:6c:a5:e2:f9:43:11:b2:5e:37:6e:
45:ff:cf:67:15:b0:84:d4:ea:2f:c8:37:0b:50:5c:6e:2f:7d:
7d:d1:b5:b7:6c:4b:fb:32:76:3d:4d:6a:c8:f4:de:58:94:26:
e1:e6:e6:26:87:ff:05:8e:fe:37:23:a7:c6:6e:00:09:dd:b1:
56:ea:c7:bf:66:50:dd:3d:9b:aa:9e:7d:c5:1f:29:a5:53:a8:
b3:4b:36:ee:47:bb:85:df:be:89:09:d2:89:0d:d9:ae:f3:e2:
84:56:99:a4:eb:2c:9f:b6:42:01:d3:10:fc:2d:b2:98:95:8e:
f9:69:02:ff:59:9f:28:85:c9:dc:44:78:be:aa:0e:4a:72:56:
b4:be:c2:e2:04:78:5d:05:26:6f:98:d1:2e:a7:a9:ea:12:3a:
ef:f6:e4:f9:dc:f2:88:32:50:71:12:3b:85:17:6b:49:0c:e6:
72:57:39:90:1f:55:a4:e9:7e:35:6e:83:ed:87:24:0b:cc:d9:
fc:79:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:44 2025 by rpki-client