Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9250d54e-73d6-3039-976b-46f47b1a348c.roa
File: 9250d54e-73d6-3039-976b-46f47b1a348c.roa (raw, json)
Hash identifier: RmXbUNj3Cevx7kRJf0+KTjViG+Dr4L74aEUmULgZW7A=
Subject key identifier: 3B:E4:44:A2:99:0D:26:72:04:28:B0:C2:C0:20:4C:A8:81:C1:09:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3324BBD9065C6D04A1663D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9250d54e-73d6-3039-976b-46f47b1a348c.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.232.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:24:bb:d9:06:5c:6d:04:a1:66:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d799a133-e7cc-4cdf-8afc-f8288d4f3891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:d5:e9:62:fe:88:40:76:42:e4:80:a4:f5:
35:ec:62:64:4d:4c:93:d7:75:ce:41:91:83:a0:c3:
c7:b5:58:a4:73:dd:57:ce:77:9b:8a:67:2c:79:8f:
e8:ad:d0:31:f3:60:3d:c3:29:53:d5:32:14:e7:ea:
54:b2:78:8a:2a:b2:c9:9d:a6:5a:8a:69:19:fd:59:
8f:51:36:0e:ae:10:b5:80:cb:4a:30:26:74:85:cf:
01:a7:fa:a8:1e:44:f3:99:b3:03:c5:4e:52:04:a4:
50:12:ef:b8:b8:ec:85:cd:33:2e:59:6e:31:33:5b:
88:e5:22:0a:d7:54:75:e7:7d:11:79:4f:fa:69:cd:
89:96:a1:4c:65:a5:e2:db:47:f7:1c:03:07:1b:d9:
9d:de:b6:26:bd:62:74:67:cc:ae:ee:8e:f5:db:d6:
f9:53:27:00:75:e9:81:4e:52:3d:e9:04:fd:95:0e:
40:62:b0:31:1b:29:b6:c8:24:c5:8c:5e:25:d7:ac:
aa:b9:9f:13:94:92:52:6a:c3:05:23:d3:6b:fd:5f:
98:7f:91:21:51:ba:9e:6f:5d:51:a0:cc:3d:41:d8:
74:b3:ad:8f:82:1f:ba:79:0d:8a:17:79:90:80:f5:
3f:d8:19:2b:2a:10:34:95:ed:66:8a:0a:fc:1d:85:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:44:A2:99:0D:26:72:04:28:B0:C2:C0:20:4C:A8:81:C1:09:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9250d54e-73d6-3039-976b-46f47b1a348c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.232.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:4f:40:b3:81:5f:ae:8e:fc:63:8a:e3:40:b3:b4:b2:bc:d7:
cd:9b:d3:ce:54:34:41:f2:e0:10:d9:9e:98:36:6a:1c:d9:9b:
85:2f:0d:0b:45:fe:43:13:95:87:8c:a6:83:1e:8d:06:76:be:
1c:a3:dc:42:a6:95:ab:69:50:d1:e3:9f:d9:8a:dc:52:69:9f:
b4:50:37:fd:ec:bc:5f:8a:08:35:a6:28:c8:ab:b1:d7:a8:46:
9a:82:c4:c5:19:07:ef:c6:e5:8c:55:3b:a1:16:67:24:2b:72:
6b:3e:6b:20:a2:ca:e5:09:a0:be:f4:1a:b3:74:6c:a0:65:a4:
b2:06:3c:cf:da:61:ee:10:3e:19:de:f4:d4:ca:0e:8e:9c:3c:
e5:e7:1b:60:2a:14:41:59:34:e2:24:1b:04:f9:83:f2:8e:f5:
89:6a:16:d1:4d:94:4e:b5:90:b5:fa:f7:5c:83:b9:fb:2e:a5:
8f:c7:a2:e3:a6:a6:58:61:dd:02:65:94:a3:75:5f:11:e0:98:
63:9c:7d:7c:56:40:8f:67:95:c7:a0:ea:ee:4b:54:b9:3e:0b:
db:fe:55:be:e5:7d:d3:9d:89:54:de:fd:da:3b:07:38:b8:c8:
f0:06:e5:3f:8e:a3:f1:99:28:42:36:dd:91:c9:e6:4e:71:a2:
e7:f8:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:24 2025 by rpki-client