Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e81571c-e190-39ef-9049-d5bd26e5bec1.roa
File: 8e81571c-e190-39ef-9049-d5bd26e5bec1.roa (raw, json)
Hash identifier: ZWTeWAOCk+uc6TwSkU+z9uqah1Dpj8BigBQuRDF0jUw=
Subject key identifier: 67:1E:4E:BA:39:6C:77:A1:00:64:08:04:58:6B:73:F9:CD:78:8D:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF84F661F710775D5A6129F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e81571c-e190-39ef-9049-d5bd26e5bec1.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:4f:66:1f:71:07:75:d5:a6:12:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=dd198f2a-f2a8-4f03-9900-9c732ea37dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:c5:55:cf:e4:b0:f8:34:40:1a:bc:f3:b3:
b0:82:3a:1c:65:a9:06:0a:e3:12:ad:e9:f6:ca:58:
c1:bf:92:ec:81:e1:b6:87:be:2c:9c:cc:9b:01:73:
b3:de:c0:2f:84:78:13:2f:9c:ba:e3:3d:e8:99:b3:
21:6a:e3:c7:57:7f:e8:90:13:f2:23:58:00:f1:46:
a8:c9:87:d1:48:14:fd:6f:1c:51:b3:b4:36:50:bc:
33:80:cf:97:b2:a7:11:e0:67:f7:52:2b:ff:9e:31:
e2:45:46:47:cd:39:89:ed:74:cf:a6:0d:dd:de:f6:
c8:0d:4f:ad:0e:ec:9d:23:c5:f9:b8:77:5a:22:b7:
f3:2f:fb:20:b3:5f:31:df:e5:4b:a1:b9:0f:8e:6e:
74:50:9a:1a:29:ab:97:2d:58:93:3c:dd:27:a9:26:
83:63:72:00:16:f5:e0:b2:fe:58:88:78:39:30:20:
bf:da:c4:2f:26:25:c9:54:bb:af:a6:62:f3:72:7c:
4a:70:7d:64:a1:16:7c:cb:38:de:99:f4:c7:79:10:
4c:f5:f7:55:9c:02:3f:4f:5a:2f:39:79:14:f8:90:
fa:f1:76:c3:89:f6:db:aa:87:7f:20:df:93:06:5d:
9c:d2:86:09:21:bd:09:36:13:c5:60:d6:02:89:c5:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:4E:BA:39:6C:77:A1:00:64:08:04:58:6B:73:F9:CD:78:8D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e81571c-e190-39ef-9049-d5bd26e5bec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:47:6a:98:55:b6:81:1a:fb:fb:a6:60:72:8f:23:28:43:c7:
5c:8c:88:b2:04:9b:b2:89:e7:0d:47:d5:a2:be:d3:9c:72:e5:
f7:46:86:4b:64:16:2b:d6:b9:98:41:9b:72:ba:3c:14:31:ec:
fa:3c:7e:da:44:29:3d:8e:77:20:5b:bc:5d:a7:fb:11:13:76:
cb:40:87:c6:59:1c:c3:41:1f:35:ae:32:92:75:74:86:b7:27:
2f:8a:36:4e:a1:59:1c:e3:0a:6a:ee:1c:cc:3f:5c:3a:35:d4:
c7:a3:66:e7:8a:f7:fa:bc:1b:64:6f:21:7c:87:6e:87:d6:03:
88:54:85:5c:1b:27:9a:39:c5:a7:58:4d:d4:f2:b1:34:82:92:
e9:a9:14:8e:71:28:19:10:f9:00:25:19:02:80:6e:e8:46:c2:
d5:7c:e3:7b:dd:e2:41:98:14:a8:6d:0f:9f:7a:71:7a:96:da:
c6:bd:fd:fa:53:a3:a9:1a:8a:ce:d5:6f:c1:17:da:6e:35:54:
18:50:45:41:00:21:41:c0:99:37:71:3f:d5:b3:5a:5a:91:65:
36:b1:2a:f3:3a:8d:74:52:59:44:df:23:35:8c:ff:a7:2a:c8:
e9:e6:3e:bb:c6:2c:be:e6:a2:bb:c5:7a:79:65:99:f9:3a:d7:
4d:74:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:33 2025 by rpki-client