Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/799a659b-c2a2-32c2-9cc6-26e18f1157b6.roa
File: 799a659b-c2a2-32c2-9cc6-26e18f1157b6.roa (raw, json)
Hash identifier: YWYXsVTrbkxlggcMXYqljvPUVGqHi7wUsUzRw1z1yL4=
Subject key identifier: E6:D4:7A:8C:50:98:46:2E:A0:A8:E7:C9:66:9C:54:D4:17:06:33:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046DB43BE59759F92F02C5E60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/799a659b-c2a2-32c2-9cc6-26e18f1157b6.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:db:43:be:59:75:9f:92:f0:2c:5e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=783c8f7a-2a7f-454e-a56d-6d11c123d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cb:0b:7c:08:62:12:61:02:73:95:be:14:74:
be:39:93:a8:62:8f:98:91:81:84:72:f3:31:d6:50:
2f:7f:78:9d:7d:fc:49:3e:39:61:de:2c:52:50:f1:
10:6d:bd:ee:80:55:bf:ae:39:88:8e:45:ab:b1:ea:
2a:9d:74:08:6b:5b:49:dd:89:21:18:dc:b7:96:82:
b8:c7:f6:ff:f9:95:cb:81:d5:40:b7:b3:d0:d3:69:
81:3d:4c:5d:2b:0e:1d:c9:c8:78:b7:d4:14:7a:b3:
bd:7d:4a:00:ba:6c:af:c4:b8:79:76:b3:74:ba:cd:
86:aa:12:c2:0d:71:1c:29:22:4a:15:df:e3:f3:f3:
76:81:60:a0:22:0d:e9:b8:39:11:85:b0:ad:92:e2:
df:46:f9:9d:76:36:9c:34:28:7d:8f:7a:cf:92:e8:
10:db:20:9c:8c:73:b7:c9:65:da:64:ab:1e:bd:e4:
c3:a5:d0:03:96:0b:28:d7:f9:17:0d:bc:28:62:b9:
0a:e0:45:fc:44:e9:cd:02:18:3a:17:eb:e5:5a:29:
31:c6:91:45:35:26:4b:30:21:77:11:8e:9a:ae:64:
97:83:c6:c1:56:ae:03:69:c6:9f:3c:95:c3:36:08:
62:1a:69:f8:f0:07:05:5a:95:76:26:85:e2:3b:00:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:7A:8C:50:98:46:2E:A0:A8:E7:C9:66:9C:54:D4:17:06:33:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/799a659b-c2a2-32c2-9cc6-26e18f1157b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:bd:ed:76:48:cf:4d:99:f8:86:73:1f:42:aa:ba:c4:62:21:
70:e6:61:61:96:c8:ca:bb:b6:26:27:90:a5:2a:d4:37:8e:a9:
21:bb:4a:b3:ab:8d:33:7a:07:39:99:ba:b9:14:e6:8a:fb:d9:
bf:43:73:ea:0a:b6:35:a8:4f:1c:88:9f:3f:c0:f6:02:84:73:
d1:47:39:ac:91:18:10:a4:b4:4a:a5:b5:17:57:44:fb:31:5e:
5a:75:1e:cb:58:53:51:c5:59:5a:6f:62:10:81:f7:b4:71:ff:
97:81:2b:7c:78:32:4c:9e:cc:64:a9:31:ba:4f:8d:c8:df:d0:
e7:a2:bc:8e:07:8c:6b:5f:7c:75:dc:a0:6d:df:4a:fd:36:5f:
4a:b3:b2:ca:61:cf:83:f3:73:ff:50:d8:50:99:4b:ee:1d:9a:
ff:89:fe:b1:b1:0a:05:6b:f1:7d:8f:ef:a0:8b:be:10:79:ed:
5d:d2:e1:83:23:4b:df:67:16:a2:5f:6c:5b:a5:ae:d7:d5:72:
8d:0c:27:bc:96:37:80:9c:d1:08:9c:ff:ee:24:d6:2d:7a:a2:
ff:c4:8c:1c:be:a4:17:b1:fa:92:be:28:e3:72:ca:a6:3c:d2:
f4:02:d3:eb:a5:ed:f9:1d:48:59:32:8d:80:e7:1a:e3:3c:60:
86:b8:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:18 2025 by rpki-client