Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e81245-7608-30a4-8dde-240b29a78980.roa
File: a0e81245-7608-30a4-8dde-240b29a78980.roa (raw, json)
Hash identifier: +RHOahK8rhf0ACwrAiMLnzvht6nWL5VYKPsbLV8XstQ=
Subject key identifier: 68:75:82:28:37:01:A2:8C:AB:A6:F8:26:77:9A:FE:B7:03:33:85:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F33E6943465A6A6C6C0F82F60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e81245-7608-30a4-8dde-240b29a78980.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:e6:94:34:65:a6:a6:c6:c0:f8:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=694fe7e0-bea3-4607-8245-e05caff4d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:6f:a8:5c:79:c3:93:56:fb:04:60:1b:14:
65:6c:bb:da:9b:a2:32:b5:db:d9:54:9d:08:f6:bf:
cf:9a:bd:1c:78:be:1f:91:fc:f1:ae:ee:47:22:5c:
6c:cb:a8:91:2c:e9:eb:d1:11:b1:19:de:ef:ea:8a:
23:fd:f3:fc:ed:3f:b2:0b:cf:83:62:aa:d9:1a:42:
17:73:2a:32:e0:51:c0:0b:91:b5:08:aa:96:4e:45:
b7:86:18:54:f5:8b:6e:d8:bc:26:f3:f0:15:13:a5:
2d:a8:dd:b2:3b:95:32:f3:2f:cb:25:b3:08:52:1f:
36:6e:83:0b:92:e3:aa:93:ca:cb:a8:e7:a4:9e:d3:
a7:6a:2f:7e:ab:d2:e6:79:d4:87:67:6c:0b:d5:30:
47:51:30:1f:48:79:8b:2e:9a:bd:0f:8c:e7:44:86:
7c:87:e6:33:cf:f7:08:0e:22:e8:08:13:e6:c9:44:
4e:a2:be:c6:b8:86:c2:4e:c1:73:a5:d2:d7:bb:bc:
09:25:b2:aa:7f:82:5c:ad:19:d8:7c:63:fa:51:d6:
a2:a3:3e:d1:40:a5:80:fa:58:90:0b:63:8c:68:be:
07:6d:07:86:ba:11:f6:2b:1e:c1:f2:e5:fe:00:f8:
65:e1:60:8d:8e:99:f2:3a:24:7c:ae:eb:b2:7b:de:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:82:28:37:01:A2:8C:AB:A6:F8:26:77:9A:FE:B7:03:33:85:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e81245-7608-30a4-8dde-240b29a78980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:30:2c:d0:c3:f9:17:e7:4f:f0:a6:aa:d3:19:0b:7a:63:26:
d4:03:c4:cd:11:51:ba:c3:c8:b2:2a:0d:eb:fa:a0:e2:55:a4:
20:88:b4:3c:45:5a:3a:b7:c7:ba:8a:3d:c1:6e:41:87:33:e6:
ec:22:bc:bb:bf:aa:93:7e:ab:d8:81:4e:99:1b:1b:4d:03:ce:
b3:23:c2:57:b2:57:ea:90:c9:e0:fc:c8:94:f0:e9:bc:dc:9a:
4f:57:4f:6a:88:f5:94:fa:90:34:d0:b1:48:1c:4c:0a:86:fe:
ce:dc:96:6b:87:44:96:26:2a:8a:c7:73:c6:2a:1f:6a:82:36:
aa:c1:f5:1e:8f:9e:b8:c3:90:14:af:db:c0:57:f0:65:95:4f:
07:cd:e3:87:08:5a:00:ff:c7:12:16:7f:a5:2a:3f:41:c6:50:
9b:39:ed:0a:3c:91:90:90:05:5b:76:32:ef:a9:16:ea:9d:51:
78:cf:02:eb:93:77:40:59:cf:c6:6e:77:8b:bd:80:2b:51:ee:
f0:bd:63:66:9f:b7:32:9b:d8:c4:ca:03:b6:13:9d:b8:57:19:
74:73:02:0d:84:11:5f:d0:10:b7:59:04:55:e8:4d:7e:e1:88:
29:bd:08:f4:69:22:8c:25:c1:ac:a2:a4:dd:0f:9c:56:42:c2:
cf:56:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:44 2025 by rpki-client