Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9419a0a7-47a3-38e6-b986-8ab7bee4cef0.roa
File: 9419a0a7-47a3-38e6-b986-8ab7bee4cef0.roa (raw, json)
Hash identifier: Xp0IA6tAeSFTwj9FG6RMiQn7tRw46WjqQIaA/pKEY8Y=
Subject key identifier: 90:F2:64:07:18:C8:38:4C:25:DC:43:FD:A1:E6:68:A7:5A:2D:C0:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584093F2E455AD3495C5CCA13140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9419a0a7-47a3-38e6-b986-8ab7bee4cef0.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:93:f2:e4:55:ad:34:95:c5:cc:a1:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=335f53ad-71d3-47aa-8fe6-a634287ee9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:bd:5a:b9:48:7e:02:e6:c5:0d:45:6a:bc:
11:e0:68:8d:fc:bc:bf:1b:7c:b6:7e:7c:55:16:1f:
1f:a9:4d:68:ff:44:7a:de:c6:6e:2e:e4:4d:5f:55:
dd:98:54:d1:2c:ee:77:45:2d:5b:a3:9c:df:8b:a8:
7c:ba:8b:e3:2c:ed:6a:35:b2:74:f5:6f:4e:d0:e6:
67:17:03:bd:16:7f:86:ed:1c:bd:55:0c:67:7f:fd:
d6:54:bb:fc:83:8e:9c:19:04:34:8a:51:ec:5f:e4:
7a:d4:0c:c7:21:31:32:9a:02:14:57:77:9d:64:22:
e0:08:a0:4c:8a:7e:02:4c:8e:cf:47:93:43:f1:d5:
c0:99:f9:bd:7c:e6:64:b3:16:02:12:62:52:f1:e9:
44:a5:05:90:fa:bf:66:e4:f3:aa:bc:d2:53:a1:16:
aa:e7:00:da:6f:fe:2e:e6:6f:b6:d1:ba:ff:f7:c0:
40:92:1a:a0:b4:b8:df:42:65:e3:7c:23:d2:bc:7e:
8a:16:d0:43:bf:f1:87:d7:f0:31:bd:21:5f:33:75:
d3:e1:18:0a:4d:f2:a1:67:c4:25:43:42:19:f9:a7:
5d:01:8b:7a:0f:87:04:d4:c6:1d:20:ae:b8:b5:4c:
1d:29:d1:0b:4f:62:ce:6d:e1:8c:bd:69:e3:6c:5c:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F2:64:07:18:C8:38:4C:25:DC:43:FD:A1:E6:68:A7:5A:2D:C0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9419a0a7-47a3-38e6-b986-8ab7bee4cef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:5f:35:5f:ff:01:6d:3f:1b:03:d5:3b:1e:36:75:eb:57:31:
1b:0d:9f:70:1e:ee:f8:c4:50:8e:7e:50:2e:94:50:52:43:b9:
a7:d9:f7:f1:13:ce:73:a1:2a:d7:e4:4a:53:ad:e9:89:41:89:
00:09:ea:b6:61:30:42:3e:dc:c8:8c:0e:f8:69:50:a9:b8:7d:
01:3e:a7:a6:73:85:07:d0:d9:2a:1a:b4:82:56:1c:a6:c5:56:
4e:79:fa:17:63:4b:21:a4:dd:4c:bb:2a:c0:06:a3:b2:11:1b:
b5:e1:63:8e:5e:90:46:e1:86:b2:58:7f:74:47:7d:49:6a:a5:
8a:f4:07:bc:0f:a7:0a:f3:dd:ac:79:f2:d0:8f:d3:66:01:c9:
00:95:50:2b:69:71:ba:26:99:44:01:ba:93:0f:49:94:08:8b:
e5:e4:b2:c0:70:43:61:4b:b4:02:16:ad:d5:28:9a:a8:40:02:
23:d2:6b:97:6d:54:cc:5c:93:6b:9a:01:f7:14:60:14:42:6b:
03:c4:6c:6a:1f:18:9f:ad:3f:fc:e2:94:3d:f4:b7:9d:72:1b:
77:8a:0a:51:87:f3:c7:14:f9:ca:c4:96:a4:a5:b6:fb:cf:a1:
63:8c:52:05:b5:ae:d1:d0:37:5b:e3:ba:fd:cf:99:d3:84:28:
ec:3f:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:29:16 2025 by rpki-client