Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81520e62-e58d-3dd3-8cd8-5aae08ae1d5c.roa
File: 81520e62-e58d-3dd3-8cd8-5aae08ae1d5c.roa (raw, json)
Hash identifier: MkEIoNig52lZ4RF1h8fSRiopiiINOIpDM2GJre12HyA=
Subject key identifier: 8D:C1:45:F4:99:5B:9D:44:36:00:30:3C:C9:3D:8D:C0:82:84:55:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B634E116BBC3BA3660A5B5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81520e62-e58d-3dd3-8cd8-5aae08ae1d5c.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:34:e1:16:bb:c3:ba:36:60:a5:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=0d934717-baff-4f6b-acda-f52041bf516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:de:73:8a:22:14:f1:62:49:0f:65:fa:3a:
6c:ef:53:ed:3d:8f:0e:b0:02:eb:de:e5:31:03:92:
86:97:57:21:a3:3e:d9:ff:2b:7d:26:5b:69:7f:94:
2e:04:8d:80:5e:28:e0:1b:0d:03:c4:11:6c:1f:12:
27:7c:ee:5d:cd:0d:de:fa:36:0a:43:12:95:af:43:
25:e8:b9:2a:8b:1d:1c:a0:a9:6a:96:c5:2d:c5:a1:
58:c7:1e:68:2c:71:9c:33:9b:9b:77:14:53:b7:cf:
b8:f0:4c:a5:e6:91:b4:25:75:8f:fe:13:33:6c:ca:
07:bc:85:53:b3:1e:b5:3f:2c:c4:62:04:ae:2e:17:
22:c9:27:a0:ca:1d:bf:67:75:c7:bb:67:66:2a:42:
16:cc:d0:b6:9e:fa:d4:67:ff:eb:2a:97:66:99:d5:
5d:58:2b:8d:50:58:80:be:8d:25:19:1f:03:a6:1a:
ab:58:cc:5a:b0:67:5b:33:78:37:e4:49:80:f8:e2:
2c:82:0c:ee:eb:bc:57:76:7d:ce:8e:a5:37:a8:de:
f7:c2:ef:68:3f:6f:5c:c4:b9:0f:38:63:98:0f:e0:
40:f2:48:fc:bb:91:30:cb:20:07:96:62:15:c9:45:
60:88:64:52:8c:02:97:54:b7:be:fd:d7:b4:77:c8:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:45:F4:99:5B:9D:44:36:00:30:3C:C9:3D:8D:C0:82:84:55:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81520e62-e58d-3dd3-8cd8-5aae08ae1d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:91:13:a4:3f:4c:84:80:d0:11:03:7a:04:7b:ee:d4:25:79:
d5:f8:09:50:86:e4:4b:3b:eb:97:79:2c:28:bf:54:87:e2:ad:
db:ee:3f:ea:3f:d4:b4:dd:d6:4c:4d:64:7b:33:17:8a:a9:b6:
d3:82:93:7b:46:ce:44:0e:3a:32:fa:24:ba:c0:56:dc:35:6e:
ea:88:13:76:2c:de:da:ca:5d:e9:22:3c:90:2e:8a:26:26:00:
fb:df:3b:43:6c:b1:f6:2b:83:c7:71:d2:c6:3e:5c:37:ae:eb:
ae:87:02:d9:91:51:3b:22:eb:96:90:6c:d4:15:8e:24:ae:ba:
3a:e6:0f:84:b6:a5:00:8f:60:4b:e8:d2:72:3d:8b:db:e0:92:
70:cb:a9:f0:8d:f6:bc:da:11:e8:28:ad:7c:30:b4:ca:57:14:
ed:de:67:cf:d8:c9:56:b8:e9:fe:40:75:37:07:69:93:06:18:
5b:b9:66:b8:bf:48:3d:21:86:b8:b1:21:b8:60:0a:88:b7:50:
61:4d:e6:b4:3d:d7:93:99:ef:1e:4e:f3:74:6f:89:9d:82:a8:
04:8a:27:63:a1:c6:85:e7:0e:6c:6a:a0:db:b4:b6:01:1d:f2:
0b:dc:2e:68:19:46:a5:69:34:77:4e:e6:46:1d:37:c2:14:5b:
65:6c:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:22 2025 by rpki-client