Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e2a7c8e-9213-3251-8fa4-2bd389f241a6.roa
File: 7e2a7c8e-9213-3251-8fa4-2bd389f241a6.roa (raw, json)
Hash identifier: MbuZNYGmQu3RRuKFJbsh+RvNU0jiRY4KvrgGddoaozo=
Subject key identifier: 14:7D:FB:07:E6:60:E1:AF:C8:68:D7:A5:BA:E1:00:A5:9A:11:33:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F33B259BC995CBFBF9D24A200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e2a7c8e-9213-3251-8fa4-2bd389f241a6.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:b2:59:bc:99:5c:bf:bf:9d:24:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=bf0c0097-d63f-48f6-b66b-6e290b85a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:45:e7:88:f3:93:ec:26:0d:ca:cf:23:2c:
42:7f:c0:61:43:0f:2c:b4:04:d6:0e:a8:66:66:c7:
8c:e4:c1:ae:fa:0c:a9:47:03:4e:39:2a:59:6f:4a:
cf:33:09:ae:a7:52:17:8c:28:e3:0a:a9:42:20:f3:
49:9e:3f:fb:53:10:df:00:02:0e:ad:fd:00:16:e6:
ae:3e:c7:23:a1:21:c6:ab:3a:cf:2c:ef:48:ca:88:
60:11:db:14:39:c0:b2:59:49:34:f7:76:e7:5c:f2:
be:ee:d1:24:6a:e0:04:4e:b6:39:45:20:f0:2a:e7:
cb:0e:e9:ef:fa:2a:45:a2:7c:fa:30:ec:3d:56:a7:
8d:ee:58:9c:02:9e:7a:7e:65:47:86:71:02:9d:96:
7c:b7:0d:f2:02:78:81:4f:1e:56:41:cb:c3:8d:b6:
25:76:08:cb:7f:cc:c3:d6:ab:2a:38:a3:a9:62:d4:
a2:e5:f8:d5:c4:ae:6a:cd:bd:af:46:d6:78:14:78:
f2:2c:a7:4b:44:17:a8:2b:b0:36:9b:c0:21:bf:c9:
64:16:9b:a8:85:21:3c:f6:22:8a:fc:70:ee:3f:d5:
77:3e:00:a9:da:d4:eb:eb:1e:f9:96:86:7f:c7:c9:
50:2a:ac:bf:38:08:50:79:2f:98:1a:11:7e:69:af:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:FB:07:E6:60:E1:AF:C8:68:D7:A5:BA:E1:00:A5:9A:11:33:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e2a7c8e-9213-3251-8fa4-2bd389f241a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e9:22:08:2a:ab:7d:e6:22:33:2f:d0:98:9e:92:d2:a9:7d:
a7:23:58:75:1e:36:ec:f5:a1:b1:a5:92:ae:35:89:ef:f9:da:
ba:58:8d:50:07:25:6d:f7:44:ec:3c:fd:8d:3d:f0:df:52:ac:
b2:75:36:e5:f2:20:48:ec:40:56:05:fd:1e:d3:4c:fe:62:e6:
3a:38:a8:54:b3:6a:b6:51:d7:ad:ae:f3:26:b8:fb:e2:8b:af:
43:f7:4c:7b:3e:69:80:25:51:69:9c:5a:33:c0:a6:2c:00:30:
26:aa:08:4a:50:9d:3e:64:fc:ba:0f:d4:81:9b:4f:ec:5c:16:
d8:03:bc:47:d0:5e:d1:46:70:50:be:43:4b:12:c2:f4:7e:41:
d0:10:d8:36:1e:e6:36:13:3d:cf:8f:c5:1e:51:9c:e3:cc:b9:
e9:83:33:1b:83:46:df:bc:35:a7:d3:49:e0:de:68:05:e7:83:
15:be:f1:87:b8:34:4e:a7:c6:da:eb:84:a7:79:c7:66:5e:59:
09:30:cd:8a:ee:01:c7:83:9c:4a:06:26:2b:bc:4f:b3:ad:23:
5e:66:a0:4a:ee:b2:4a:4d:ab:40:7b:90:8d:b7:9e:04:87:7c:
dd:85:a5:ff:aa:b9:82:00:93:77:f5:3d:24:99:5d:55:4d:30:
65:5c:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:19 2025 by rpki-client