Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aea3c2a-f13b-37e0-816f-f3b1c5ea6081.roa
File: 9aea3c2a-f13b-37e0-816f-f3b1c5ea6081.roa (raw, json)
Hash identifier: HKSKJKisdGhEwwCiG/5pcXCNOa8mSBJPprx38IQCxH0=
Subject key identifier: 62:49:82:CE:CA:05:89:C6:9D:CE:D2:4A:C3:12:DE:5B:EA:00:EC:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043A0D96923A3E2F2B60351C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aea3c2a-f13b-37e0-816f-f3b1c5ea6081.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:a0:d9:69:23:a3:e2:f2:b6:03:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=63c4a985-ecc1-402b-994c-fcfbbae1be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:96:e6:df:27:88:77:12:cc:d2:3d:bb:7e:
2c:a4:e3:3f:38:6a:43:4f:d8:17:9e:12:63:92:44:
a0:1f:26:8c:05:57:92:ae:d6:b8:6f:a0:33:9b:57:
ba:a0:25:f7:bc:a1:36:5d:86:ad:0f:15:2c:9f:7a:
5b:b8:64:6d:c7:f2:dc:34:be:2b:e3:70:66:75:72:
2a:f9:2c:ae:37:44:b2:f4:27:d4:b6:d2:9a:cf:42:
0b:7b:5e:42:be:93:ba:56:bb:6a:3e:d9:8b:2f:c0:
1e:47:a5:fa:85:31:10:10:2c:91:2d:19:4a:13:c2:
c1:eb:1f:8e:94:26:f5:3d:5a:a9:76:c5:4a:70:5b:
f8:fd:ca:bb:7d:89:5a:2a:6d:96:7e:c0:a3:fa:9e:
1e:01:73:33:d4:89:90:9f:cf:a1:6b:fe:04:70:c7:
67:a1:d2:3e:d0:e9:e8:9b:b5:c3:a5:f1:a5:3d:ee:
9e:19:15:f1:a9:6c:47:ae:04:f6:09:4b:9f:83:2e:
89:2a:4a:71:87:70:92:99:2f:a3:8a:61:55:ad:03:
20:9d:06:f9:cf:ce:0a:92:00:e7:d8:fc:86:0e:ec:
9c:55:68:8d:bc:18:e8:eb:45:4a:15:0e:81:cf:32:
0d:1f:da:7a:4d:ee:a3:6b:dc:d1:34:bb:02:12:5f:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:82:CE:CA:05:89:C6:9D:CE:D2:4A:C3:12:DE:5B:EA:00:EC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aea3c2a-f13b-37e0-816f-f3b1c5ea6081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:8d:ae:a3:2a:a9:a3:8c:51:e1:68:11:69:c5:00:74:b6:ff:
82:d3:61:a0:ef:f3:d2:74:40:5c:e7:ce:00:ce:f2:55:25:7e:
58:0f:d3:dc:b9:4d:17:10:ef:40:ce:19:ca:fc:87:a2:af:10:
a6:d9:b2:fb:cc:f7:7f:2b:37:e2:32:d2:48:84:31:2a:60:57:
c6:23:78:84:55:23:19:79:05:3b:e0:cf:46:54:08:e2:3e:7e:
f6:75:7e:9f:61:7f:b9:d6:b0:23:bb:13:c3:4a:c2:88:3d:b5:
08:67:6a:1f:9d:20:c4:4a:b6:17:53:6d:cd:46:90:fe:eb:a2:
91:9d:51:bb:8f:61:10:2b:df:a3:7d:fd:33:63:39:b3:8d:22:
90:b3:8f:bd:09:12:11:af:c5:c0:6c:70:0c:33:9f:ce:70:70:
61:81:3e:d6:2f:6d:9f:54:8c:b5:99:55:c9:5d:8c:e1:6a:91:
93:d3:d3:1d:2a:e4:11:ef:fd:0c:e0:46:f4:93:ca:2c:f1:a2:
c9:11:b7:7e:cc:59:aa:4e:a8:06:26:e7:22:31:0b:b8:50:61:
18:2f:0d:88:e3:d0:34:7f:e7:29:e8:fc:14:16:6b:15:60:27:
9c:3b:7b:2b:91:57:be:31:90:62:bc:e9:75:52:77:fb:3a:48:
e4:cf:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:31 2025 by rpki-client