Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e4a1644-5218-3a71-b008-22ca6a698834.roa
File: 7e4a1644-5218-3a71-b008-22ca6a698834.roa (raw, json)
Hash identifier: Wk6dkellok+PTyDUuXrIUnzD/4kR9r+NpnxjeZd6ohU=
Subject key identifier: 70:FB:E9:3C:D9:CA:12:AA:15:9A:B5:0C:A6:DE:59:6D:D5:01:5B:25
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BBCA09D353E0381D741989F8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e4a1644-5218-3a71-b008-22ca6a698834.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:ca:09:d3:53:e0:38:1d:74:19:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=886fb56e-3264-4d86-8a9d-1347eeef9ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:5a:d8:5d:85:4e:c4:d0:10:7f:a6:42:7a:
28:93:bc:32:66:69:4e:cd:4f:94:22:ad:94:ec:0f:
6a:af:10:12:f0:cd:45:83:31:86:60:df:7b:a6:5d:
89:62:3f:72:e9:77:4f:7c:a9:e1:c2:83:bf:2e:4f:
11:1e:e0:20:ac:5d:83:da:86:51:b4:e0:4d:37:e7:
1c:89:95:00:a9:e3:3b:34:b0:17:79:65:5f:f4:93:
88:cb:0d:26:34:9a:a5:2f:b2:82:b3:7e:81:0b:58:
f5:ef:c2:00:3c:04:18:2b:2a:2f:24:fb:74:7c:d7:
26:d3:01:7e:20:96:04:f6:77:65:1c:33:8a:88:be:
fc:31:87:d3:a5:73:46:80:b6:89:2c:bc:7d:80:ad:
e2:90:b1:c4:94:5f:e8:82:6b:83:e0:3b:65:32:6e:
d0:9a:ee:d6:19:c0:aa:8a:12:7e:1f:46:aa:3f:5a:
7a:5d:ae:b2:25:3c:bd:67:82:c4:13:a2:d2:e2:0c:
64:85:e6:b2:14:ba:3b:87:90:13:52:04:76:63:54:
83:91:d9:9e:fb:8e:43:27:83:ca:c0:49:16:12:50:
ee:52:08:4b:07:95:7f:7d:f9:a9:8a:9a:53:7e:8d:
00:12:de:c2:69:7b:b8:4b:13:d0:71:3a:ed:d1:cd:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:E9:3C:D9:CA:12:AA:15:9A:B5:0C:A6:DE:59:6D:D5:01:5B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e4a1644-5218-3a71-b008-22ca6a698834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:a1:d0:81:a4:3c:7d:2a:f7:6e:2b:56:f4:49:22:98:31:58:
f8:c5:eb:07:3f:e7:c2:dc:59:c6:82:ab:67:9a:78:24:e9:a1:
31:b9:7c:1a:71:83:4c:03:2c:8e:d6:c0:44:66:a0:0f:87:9b:
7d:b4:43:cc:42:8f:24:eb:d4:a8:c5:83:8a:11:cb:89:7a:3f:
77:3d:e0:b4:df:3e:89:d2:1f:81:a8:38:9f:68:75:34:6d:f3:
5c:00:ad:54:ff:e4:66:fe:63:2c:ea:0e:d1:37:a9:d2:04:72:
42:83:5b:1b:21:4f:82:bb:f7:d9:23:c1:df:85:bd:cd:d4:ac:
eb:f0:7d:6f:90:20:20:a8:a4:84:45:28:e8:c4:ef:db:9a:1a:
7f:f3:78:24:77:1e:b7:ac:16:f3:98:6c:0d:d0:d3:9a:12:3c:
71:9f:80:11:73:bb:3e:52:5e:cb:b8:74:b9:54:4a:b9:51:7d:
90:61:47:4d:72:d7:f2:35:71:0b:41:51:b5:f9:bc:c2:bf:8f:
81:93:bc:56:bd:d9:bf:82:58:99:cc:24:db:c7:36:c4:bc:34:
40:d5:bc:fc:61:6e:63:65:a0:8f:f7:52:9a:6e:6a:b5:67:15:
e0:72:49:85:51:60:fe:35:e9:34:59:af:2d:00:75:2d:2a:1a:
7d:f2:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:32 2025 by rpki-client