Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d54fac2-e59e-318e-91fd-0de5c7917bee.roa
File: 8d54fac2-e59e-318e-91fd-0de5c7917bee.roa (raw, json)
Hash identifier: yVP2AJXK84Qsn4f5Qo3TpLhrZF7T/DxVNBF5HJJpf5M=
Subject key identifier: A7:D7:CC:F7:5D:1F:D3:8C:3E:41:CF:1F:65:45:BA:4C:E4:76:4D:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840941FAF63F70B10DD8C69AE40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d54fac2-e59e-318e-91fd-0de5c7917bee.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:1f:af:63:f7:0b:10:dd:8c:69:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=af5cd831-34cd-4d34-b383-c83b97e83ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:d5:39:4f:45:04:5e:0a:30:1d:a5:37:1d:
e3:5f:22:5b:c3:9b:d0:0c:31:de:3b:ee:d2:61:1c:
21:86:3d:8e:75:92:0b:cc:de:75:89:08:6b:e8:5e:
02:4d:54:40:f6:dd:09:56:63:7b:89:71:87:58:24:
c0:51:3a:8e:18:75:22:5c:64:b3:ee:c6:e8:23:4c:
3f:69:1a:17:5f:c2:14:59:6a:1c:96:d5:6b:fa:0d:
88:e3:63:4d:88:53:2c:4a:9a:a6:01:fb:ca:d7:94:
ad:8c:cb:38:f6:ff:24:74:b3:e9:60:85:f2:bb:9c:
b4:d5:84:ef:72:e9:e8:14:e7:0b:78:f2:82:df:87:
18:b7:ac:a8:7f:be:e8:27:0f:64:be:bd:67:27:f8:
7c:04:e1:22:98:89:27:0e:ce:e9:14:1f:d2:b4:77:
0f:6b:9c:2c:eb:ee:4b:90:02:da:10:d3:9e:a7:97:
43:c1:81:b0:ff:ac:5d:46:14:b6:72:f0:d0:6a:1a:
94:7c:09:75:6a:99:56:a1:87:f8:70:1d:d7:c2:c5:
a2:e5:36:3d:69:81:0d:c5:64:a5:fc:5d:8b:60:9d:
28:b9:03:d9:ad:88:be:47:90:7b:1b:85:cd:05:df:
bc:d6:d0:37:0f:29:5d:f6:aa:2d:05:59:44:7f:40:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:CC:F7:5D:1F:D3:8C:3E:41:CF:1F:65:45:BA:4C:E4:76:4D:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d54fac2-e59e-318e-91fd-0de5c7917bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:8f:27:91:58:c0:85:24:d2:ca:08:c3:78:84:29:e1:8b:bd:
23:e6:df:f3:aa:86:fe:10:2f:0f:b2:65:be:61:ca:e2:e8:28:
61:c9:23:28:ec:00:25:bd:f1:26:19:63:85:bf:eb:00:14:64:
f6:d9:b8:65:89:af:fc:e7:5c:c7:8c:58:c9:ec:22:25:b0:42:
4c:e6:92:ff:68:48:8c:26:6f:83:19:90:6a:3e:ab:76:7d:ad:
ec:97:0e:03:3b:74:2a:16:81:3f:5d:02:8a:d3:b6:0a:70:52:
76:dd:ff:f2:bf:6f:04:c7:81:69:ca:f7:8d:7e:21:93:6b:fc:
9d:e8:8b:fa:d2:2a:31:dc:7d:f0:07:03:95:5b:2a:a8:b4:f2:
44:61:0f:9b:42:95:e3:95:54:bb:cb:ea:9e:7e:a3:e9:8b:ab:
14:37:19:1c:67:a4:77:d5:ad:e4:43:53:26:dc:5f:e7:91:4d:
31:80:09:f3:7b:a2:8f:79:b3:ae:f0:06:ab:01:e3:b0:2d:da:
90:72:47:26:a8:fc:c6:3c:1c:fe:e6:32:26:d1:15:67:5f:df:
2a:8f:62:fd:d9:44:c4:a1:af:4c:1c:66:74:13:30:61:b1:18:
ea:2c:97:c7:0e:bb:44:0b:88:6d:3c:82:11:a3:3d:e8:b5:3e:
4c:54:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:39 2025 by rpki-client