Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819e1ea2-c7ad-3fbd-9470-17b07d3c538c.roa
File: 819e1ea2-c7ad-3fbd-9470-17b07d3c538c.roa (raw, json)
Hash identifier: 6/IRlX/s4MfJZAfpTYyt/aU+0KYgd8TbJVXEjkk324o=
Subject key identifier: 22:97:D1:B3:5E:3F:30:F9:74:7E:D2:2C:20:A4:A4:08:34:D4:DB:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F5DA38820F014C594F5AC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819e1ea2-c7ad-3fbd-9470-17b07d3c538c.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:5d:a3:88:20:f0:14:c5:94:f5:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=6b3b09ac-84bc-4039-b164-515070502694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:bc:1e:39:d1:e6:f4:9f:a8:d6:85:65:80:
27:36:a5:83:3a:ce:6b:7e:2e:6d:3d:b4:e4:4c:a5:
75:57:55:15:23:72:75:19:9e:a4:1f:a1:00:1d:51:
07:76:30:0b:38:41:4f:86:98:bb:90:f8:d7:3a:4f:
06:33:6c:d3:98:d0:88:bd:0c:ed:78:f7:f1:84:5b:
7e:22:8c:86:f3:34:ec:ef:15:1e:a9:44:a7:5c:68:
39:8a:21:a1:da:67:07:fe:8e:0a:40:26:01:bb:9a:
78:9a:c0:4e:ce:0f:e9:6b:b9:3a:c3:f7:9f:94:47:
2f:93:a1:33:bf:a1:87:8e:82:32:19:b5:01:3c:d6:
80:cd:64:e4:54:b5:f9:72:ec:ca:ef:ba:27:e9:ed:
55:ad:1e:16:e0:3b:ac:da:5a:9a:ad:7f:8c:aa:be:
f8:d9:69:33:f7:ee:c5:a3:40:b6:09:f1:d4:f1:ed:
57:d3:98:fd:a3:39:95:2f:21:12:67:e6:e4:92:2e:
1c:4d:6a:55:7c:a6:84:4d:77:c2:9c:d6:92:f1:43:
51:0e:18:66:f6:b6:53:fd:a8:13:4a:2c:75:11:1a:
b8:9f:4e:7f:c4:a8:25:30:ad:d4:58:33:db:61:9f:
7c:4b:8e:d0:b5:41:d1:58:d0:33:34:6d:5e:c9:91:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:D1:B3:5E:3F:30:F9:74:7E:D2:2C:20:A4:A4:08:34:D4:DB:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819e1ea2-c7ad-3fbd-9470-17b07d3c538c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:15:89:68:d7:d4:85:de:ee:3c:07:80:cf:d3:b2:8a:87:33:
f1:0e:27:0b:0f:c2:dd:37:9e:00:ca:1d:40:74:eb:8d:fe:4c:
55:50:7d:5f:20:2f:de:c7:05:b8:98:cf:54:46:51:5b:63:84:
f9:20:e6:3b:9a:f5:ae:a4:72:10:21:e3:ef:c1:fc:df:46:a5:
1d:b2:fb:be:a6:0f:1d:d9:88:1a:d6:bb:b4:39:19:ba:c1:55:
62:99:df:71:32:f3:53:68:2c:0b:6d:0a:63:e9:a3:17:bf:9a:
62:75:c2:47:41:4d:3f:ab:ef:06:ef:2a:98:e8:25:c2:13:da:
b4:dd:ad:28:c4:ab:15:35:a9:ff:c2:1e:77:1d:68:69:cb:b7:
b0:ab:fe:04:92:13:d6:07:63:71:03:a3:4f:d7:71:bc:03:91:
53:cb:be:4d:52:1e:d8:6c:40:53:6f:3b:45:ab:f0:e6:b0:b8:
bd:6b:97:f9:16:38:d9:4b:af:c9:aa:11:a0:12:e8:5d:82:ed:
45:18:96:be:08:0f:6d:b3:34:85:6b:08:5f:ca:e9:6b:ae:77:
8c:36:d6:60:25:ae:f2:4b:be:68:b0:d2:c8:38:e3:00:e2:09:
5b:3b:78:61:58:d7:2b:39:2c:41:95:cb:72:f1:c1:43:25:a4:
ad:e6:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:25 2025 by rpki-client