Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a19b46f6-5b22-3435-b65a-369bcc4d6733.roa
File: a19b46f6-5b22-3435-b65a-369bcc4d6733.roa (raw, json)
Hash identifier: 02gE0K17b1J0jVYmMuYV+ZD4S3c3/ICLXLwrIbfyWnk=
Subject key identifier: 78:30:3A:0E:AF:BF:9F:44:DF:EB:92:D4:FF:35:C8:75:87:75:DC:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6BD7706F71AA44BB9ECBA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a19b46f6-5b22-3435-b65a-369bcc4d6733.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:bd:77:06:f7:1a:a4:4b:b9:ec:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=b0c0625d-4d18-41c1-bc89-6a62b3c173f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:44:56:2b:f8:07:02:44:78:c1:9b:5b:81:
e6:db:2d:2e:0a:ff:02:2a:ae:ae:52:2a:b7:b2:4e:
22:fc:90:50:98:d5:5b:60:f8:10:99:75:0e:fe:02:
2e:a1:b5:d6:11:40:ee:e7:c7:00:1b:d8:d5:ca:af:
72:b6:71:e8:bd:c9:de:1a:e9:42:ed:b0:d3:d8:55:
49:75:d6:ac:1d:56:c4:fa:41:93:ac:54:5f:76:50:
66:84:fd:0f:4c:be:3a:84:09:a9:bd:b8:a7:52:e6:
99:7b:10:bd:4c:33:2d:48:ca:aa:d4:e8:16:19:61:
c8:b7:9f:16:68:e7:a5:24:02:c1:66:d5:e0:e7:42:
ef:87:d3:4b:32:1b:e2:4a:1e:1e:ca:eb:a6:04:99:
3d:fa:1f:97:7b:6d:45:f0:27:70:0e:6b:cf:74:89:
c8:3f:72:e7:51:2a:97:a5:0e:d3:ec:e9:92:47:6e:
28:1b:9e:60:23:c9:6a:86:30:f0:06:5d:56:34:65:
5f:c4:30:99:fa:45:ec:8e:43:c7:97:0f:de:3e:e0:
34:72:76:bd:49:93:f9:a6:14:ea:5e:4a:ef:2f:51:
f7:54:9d:68:9f:22:3d:39:0c:5d:d6:15:6f:fa:ea:
88:d7:67:ae:85:62:8a:1a:7e:f5:1e:3a:a9:09:96:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:3A:0E:AF:BF:9F:44:DF:EB:92:D4:FF:35:C8:75:87:75:DC:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a19b46f6-5b22-3435-b65a-369bcc4d6733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:02:a3:8b:ab:25:75:86:4f:b4:b5:cb:62:04:ef:68:cd:18:
0e:6e:dc:10:de:d3:1b:34:6f:60:49:3e:92:fe:6d:02:17:19:
19:d4:dd:99:36:86:42:c2:a5:ba:7e:a1:ed:55:be:36:cc:79:
1c:6d:ec:7d:02:cf:4a:51:e5:7e:42:12:ec:27:a6:42:65:e9:
02:33:7d:e3:af:c5:2f:10:8b:a5:3e:b8:be:fc:69:1a:db:87:
9f:b2:6a:94:a3:88:bd:69:97:3d:4d:5b:22:85:3e:91:09:28:
45:9d:c0:f4:9b:96:a7:64:43:39:83:1d:0c:d1:59:20:06:b4:
fe:53:d8:6e:98:32:48:9a:8a:1e:fb:0a:36:82:c6:33:68:54:
a7:65:a0:ba:37:eb:ca:d4:b3:0b:3e:53:fb:08:b5:49:dd:85:
ff:70:0a:eb:47:5a:af:0f:e6:06:d3:5b:20:b0:65:9f:f8:d5:
70:c7:bd:17:47:0a:85:de:0c:20:47:71:a8:73:6f:a6:32:ed:
7b:b4:9d:7e:b3:39:4a:d2:e6:2e:69:42:70:ec:51:d2:ab:9a:
ef:22:69:0e:6d:54:b4:9a:3d:cc:69:30:ea:56:3f:61:5f:f9:
11:14:04:00:1c:4e:ff:a6:97:25:2c:d3:d8:11:69:5f:10:81:
85:8a:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:19 2025 by rpki-client