Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f9d280-fd96-3fb7-893f-fa235e173691.roa
File: 95f9d280-fd96-3fb7-893f-fa235e173691.roa (raw, json)
Hash identifier: TH8UW+XtguK51txxXWq9CCXQlztLmpQKVwMe4PQs69o=
Subject key identifier: D2:29:96:DD:A9:14:BD:E9:53:17:58:DE:2A:83:9A:FB:DD:5F:18:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA804AEA68517CB03F44AEE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f9d280-fd96-3fb7-893f-fa235e173691.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:04:ae:a6:85:17:cb:03:f4:4a:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=80b40bef-46e9-4bb8-a694-b926cc9f62d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:c4:17:49:fb:41:f1:46:d6:32:87:81:26:
56:19:fa:f0:0f:3a:90:9d:0d:e9:7d:4a:d5:d2:a9:
3e:74:99:0f:a6:64:4b:02:be:46:cc:cf:47:f5:d7:
e7:6a:a7:f0:14:b5:d4:4b:cf:49:c1:d5:18:ac:93:
19:11:dc:63:5a:86:77:a0:20:7f:87:96:c1:b8:a7:
f6:ed:64:39:da:6a:59:3b:72:a2:a6:85:bc:cf:5f:
2a:26:c8:f7:e0:b5:d0:7c:45:1e:36:93:1e:19:43:
f7:73:bc:97:d0:f0:e2:66:5b:0c:ce:32:a9:0d:b0:
11:e3:cb:76:ad:fe:09:a4:df:b0:7d:b2:1f:95:a7:
2a:ad:34:70:a4:43:68:83:81:28:9a:3c:9a:21:b7:
47:a0:f2:20:5b:0d:0c:9b:bf:b1:50:99:19:89:57:
62:34:0b:e0:fc:71:53:b9:aa:dc:aa:5e:75:15:11:
29:d7:57:9c:45:dc:19:00:83:13:cf:fa:db:78:62:
41:36:8d:e0:40:ba:0a:1e:12:d9:6f:47:c7:36:e6:
d5:b3:9b:3f:d4:03:8f:63:0b:25:5f:94:79:bd:41:
33:f0:32:fc:d5:95:71:5c:5b:8b:53:53:f4:86:45:
b4:2a:78:64:1e:75:f2:c9:65:9d:de:c5:9a:7c:90:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:96:DD:A9:14:BD:E9:53:17:58:DE:2A:83:9A:FB:DD:5F:18:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f9d280-fd96-3fb7-893f-fa235e173691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:62:65:83:bc:69:1e:b9:1e:69:db:c1:7d:99:6b:db:9a:09:
60:de:bb:e1:b5:8a:9e:a9:7b:10:ac:61:bf:75:70:4b:69:db:
ce:fe:e1:21:64:f4:37:49:e8:52:8f:1b:23:bc:11:3f:3e:b6:
36:87:88:c0:04:da:84:a0:1d:59:e8:00:2f:5f:ea:66:4e:cf:
74:00:86:18:b0:fa:86:19:bc:6a:59:d3:53:70:78:a2:24:5a:
81:15:ac:58:22:6b:f0:8c:5a:ad:8c:d0:61:f6:67:e0:5b:6d:
27:e6:c2:89:39:a6:5b:b5:1a:d8:a7:34:58:23:dd:6a:8c:c2:
2d:c0:ae:85:bf:45:d6:c8:c5:e7:a1:bc:d4:e3:43:9f:ff:02:
e9:b4:11:b6:c2:16:b7:75:cf:13:21:d6:89:d4:60:c8:fa:8f:
5a:32:ec:40:16:32:80:f6:36:9d:0f:f5:1c:d6:7f:63:7f:20:
4a:13:39:46:69:0d:23:d2:e3:be:a4:01:6d:14:d7:35:38:fc:
aa:e6:7f:a9:f4:d2:b3:69:d0:2d:8f:62:bd:ee:b3:89:e4:bf:
0f:71:b3:05:32:ea:e5:32:ef:a3:e9:e1:1a:9b:06:76:80:c4:
e0:4e:34:05:d0:c7:89:5a:11:73:aa:a2:31:44:f3:a1:33:00:
f5:52:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:15 2025 by rpki-client