Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9411847d-787e-3f76-bef2-5437be77c00d.roa
File: 9411847d-787e-3f76-bef2-5437be77c00d.roa (raw, json)
Hash identifier: SiDZcZOOTewpB8vCcvjpZdxv7/gjb2ELi8cMD3n3/74=
Subject key identifier: 4C:27:5B:E3:C7:FE:C6:5F:F2:60:5D:5F:B0:70:71:EE:0D:76:D1:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C146953960FEC38C88C1440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9411847d-787e-3f76-bef2-5437be77c00d.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:14:69:53:96:0f:ec:38:c8:8c:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=b0eef3b3-f72f-4a70-adb6-7f555f9ef21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:1b:a9:ee:da:a5:f1:b3:d8:01:4b:6f:2e:
b7:05:bc:8a:95:bb:41:39:2b:10:f6:7e:99:dd:81:
52:ec:53:25:39:1a:04:c0:7c:a4:17:c1:5a:6d:be:
a9:ba:fe:e1:da:89:03:3e:0f:14:2a:f5:7e:6c:9b:
de:c3:d7:b7:16:af:b5:11:2b:70:97:43:58:fb:43:
56:f2:e9:f8:15:03:45:74:81:02:7c:ef:65:ef:24:
32:dc:19:18:8e:dd:a4:08:56:b2:16:5e:21:e3:57:
de:4e:53:3f:7f:26:b3:05:2a:b4:c7:73:3b:24:f8:
23:44:37:9a:46:6c:85:57:d3:63:24:ac:da:d1:54:
6d:0a:f6:bb:61:f1:48:fe:cf:75:74:62:ff:e5:48:
01:9f:53:b9:9d:2a:12:6b:ba:28:2b:15:66:ce:37:
62:ef:af:91:03:90:70:a7:f6:0b:d8:13:a1:a0:fa:
a6:cc:58:e6:54:8c:fa:64:50:aa:47:cc:39:3b:eb:
41:ad:8f:3c:48:fb:95:1c:00:c1:db:71:0c:57:54:
af:41:89:89:47:cc:33:57:23:47:aa:0e:08:32:9b:
cb:30:9c:b5:7d:ff:a2:b4:02:8c:79:cd:07:93:b0:
f6:9f:c8:cc:e6:b6:de:c5:39:1e:7e:3e:d5:d4:89:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:5B:E3:C7:FE:C6:5F:F2:60:5D:5F:B0:70:71:EE:0D:76:D1:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9411847d-787e-3f76-bef2-5437be77c00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.230.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:3f:b0:95:98:d3:5a:6e:11:25:af:e3:04:56:ef:e9:90:3d:
bb:d4:74:0f:55:c1:0c:88:64:3a:10:f7:53:23:b1:f6:a7:15:
37:13:ad:0b:9a:b6:75:80:65:18:75:d5:92:28:88:8e:ff:79:
ba:17:d7:7f:be:e6:0b:3f:99:58:d9:7a:9b:2a:9e:de:88:88:
c3:73:9f:5c:fb:80:8f:14:aa:16:9d:d2:55:94:aa:a1:87:60:
de:99:48:5c:b5:ef:01:8a:33:51:3e:7d:c5:69:5d:8b:97:37:
f8:d6:e7:a4:ed:4e:9b:44:2b:c2:96:57:46:d6:bb:6f:4c:82:
c1:08:a5:40:2d:02:c6:83:17:d2:af:ed:3b:b3:a2:24:fd:b4:
26:a3:c0:22:f1:82:84:10:3d:5c:28:6d:87:0b:23:39:de:7f:
7f:84:a3:37:ac:67:cf:8b:be:9d:01:ff:0e:22:3a:d3:a0:d9:
92:c4:ef:00:a9:4d:17:cc:28:63:41:07:cf:d1:ab:ea:1b:92:
e9:31:07:fd:12:6e:2a:e7:15:f6:45:28:7e:33:b1:a0:71:00:
3e:2b:dc:05:49:f9:9f:98:96:fa:50:71:8b:66:21:c2:4a:e7:
05:c0:17:1b:c2:73:77:69:80:48:77:52:14:66:de:30:e0:6b:
c7:4f:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:07 2025 by rpki-client