Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9d3e2d-e347-3487-94d1-eefebd123369.roa
File: 8b9d3e2d-e347-3487-94d1-eefebd123369.roa (raw, json)
Hash identifier: I3fUROX8euDdQLlud3YdvLFPnyRhVkX3inVqdOC0f88=
Subject key identifier: 9E:33:EF:59:21:F9:9F:06:5C:97:77:31:A1:F0:EB:32:9A:DD:E3:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB9D0D28083A0163857D1A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9d3e2d-e347-3487-94d1-eefebd123369.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:9d:0d:28:08:3a:01:63:85:7d:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=1121a69e-bb0d-4f67-927f-8afa5d392bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:f6:08:28:c3:7c:1f:d1:1f:b6:b5:a5:9c:
6b:f3:85:dc:0a:2e:2d:c3:cb:4e:49:4b:59:8f:94:
70:af:56:16:20:9b:80:97:17:52:a5:41:ce:ef:81:
ed:02:cc:cc:91:7d:09:90:1b:89:e9:da:78:7f:93:
7e:49:a5:ef:92:80:28:a8:1b:1e:fe:af:31:8b:1d:
5e:07:6b:d6:30:03:fe:fa:66:b8:b9:3e:f8:1c:8f:
06:5f:8c:20:40:1e:13:b4:70:7f:7f:92:66:10:26:
e6:e7:95:f5:28:4d:7f:f3:a1:6d:fb:05:54:ff:e2:
6c:04:0c:17:e3:54:fd:2b:31:fd:73:4b:ae:5d:c8:
37:9c:0b:c0:fb:60:cc:37:6c:c7:3d:b7:5a:f7:de:
56:61:40:f8:64:3b:d6:64:bc:d8:94:29:ab:87:2f:
7a:43:7d:96:38:03:2e:c6:26:7f:65:9f:22:2e:5e:
28:6a:36:51:23:aa:05:2c:ab:df:e5:86:74:92:82:
e2:65:8e:5b:e7:b1:19:6d:0d:bf:d0:eb:73:6d:19:
3b:b7:56:8c:a5:51:27:0f:9b:de:0f:ea:ba:a5:b4:
f3:fe:85:29:4b:77:27:40:fa:a6:98:58:96:9e:d5:
a6:66:34:0e:a7:4c:59:c0:f9:10:ba:be:c3:3e:10:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:EF:59:21:F9:9F:06:5C:97:77:31:A1:F0:EB:32:9A:DD:E3:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9d3e2d-e347-3487-94d1-eefebd123369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:43:7c:98:5f:53:62:5f:7d:ef:95:f5:e9:b9:3d:ed:40:2a:
a1:1d:ee:cb:ff:cf:c9:fd:63:4e:b9:45:74:3a:e0:33:6e:00:
ad:ba:7e:e3:63:a9:04:c8:24:d5:62:ca:55:5f:9c:ee:4c:61:
36:a6:f6:3f:b1:96:51:29:22:4d:58:95:84:1d:14:5a:4d:77:
37:97:6c:b4:9a:0f:1b:73:27:75:c7:09:b1:b0:74:e8:e6:72:
b7:61:2b:30:dc:5f:e5:9c:f1:c3:60:6a:a9:eb:96:42:d4:61:
51:f2:b4:55:71:ae:b2:aa:ec:fe:b9:1a:ea:d0:22:86:fd:a4:
8e:28:12:8b:28:6f:2c:af:2f:80:df:e5:95:4d:d8:7a:49:b3:
7c:77:f2:b5:b4:0c:f0:2a:a6:7a:8a:91:b7:f2:59:26:9b:52:
f6:40:e6:18:25:12:00:19:32:ae:c9:72:19:f2:64:ac:9c:72:
c7:1c:09:12:15:99:31:e3:1f:96:42:36:a5:b7:41:6e:f1:0f:
43:b0:38:81:b1:8e:5b:42:85:cf:29:2e:78:c6:8f:84:66:54:
6d:92:a6:66:83:76:31:53:a7:68:a5:6b:40:38:d3:e4:d8:af:
7d:b6:45:95:e7:19:61:1e:a6:44:db:73:e7:39:38:10:fc:d5:
80:72:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:43 2025 by rpki-client