Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2389bce-7610-3a93-896b-4761a2f63689.roa
File: a2389bce-7610-3a93-896b-4761a2f63689.roa (raw, json)
Hash identifier: x0LHnbnkH09smEMFBuKCPEQB1fo7q1EDnOIxw+ZSG8s=
Subject key identifier: B5:A8:74:9B:D6:83:E4:5D:EB:D6:CA:2F:F1:AA:3C:35:B2:D9:53:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B555ED2A27AE5A4B2A31380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2389bce-7610-3a93-896b-4761a2f63689.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:55:5e:d2:a2:7a:e5:a4:b2:a3:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=253d9860-152e-4ca2-b3ff-34237036d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:19:37:83:16:43:cb:01:d6:5a:46:1c:31:
c3:4a:04:6b:9e:ab:a1:8d:69:f9:49:df:d6:67:40:
ea:e7:bd:c4:90:e4:39:1d:2e:5d:90:ce:f4:c0:3a:
a1:8c:df:ab:a7:0a:11:9b:61:9e:52:ee:17:2d:ac:
cd:33:52:f8:a5:5c:81:ae:14:a2:fc:fd:60:c3:39:
8f:fa:7e:7f:27:b2:27:b8:02:01:5a:44:20:f1:ef:
29:79:1a:8e:14:c8:22:eb:da:f8:ac:15:09:2d:43:
fb:77:e1:11:d9:56:5b:2e:3b:20:e9:e2:a2:80:e4:
1c:8b:e0:09:59:a0:b8:53:ee:97:42:49:d4:7d:37:
70:4f:61:7c:27:cf:9c:b1:cc:b8:9c:dd:38:5e:b1:
ad:ea:36:0f:14:5b:6b:05:7f:ee:c4:42:35:27:37:
dd:86:97:2e:bf:64:91:15:9a:12:07:81:2a:f4:1c:
f5:a3:12:f2:17:71:ff:bf:29:40:78:fb:cc:e9:04:
3f:e5:05:b0:f5:08:2f:da:62:4e:31:5a:66:73:7c:
87:5f:4f:93:54:ed:15:c6:28:0b:d2:4b:23:a9:e8:
c1:3d:d0:9e:5a:69:bd:05:61:69:0a:aa:47:f1:63:
68:d6:a7:13:ce:a3:40:8d:48:12:79:ba:f4:b9:b9:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:74:9B:D6:83:E4:5D:EB:D6:CA:2F:F1:AA:3C:35:B2:D9:53:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2389bce-7610-3a93-896b-4761a2f63689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:da:b9:67:3d:3f:a7:30:7c:4b:8f:31:31:59:0e:8a:fc:66:
0a:45:dc:4b:6b:6d:44:9f:03:6e:8e:01:27:17:c8:ea:5c:6b:
94:46:52:db:5c:f3:aa:c5:98:90:d3:e2:d7:18:06:c3:ee:ec:
13:8e:7f:40:41:e5:19:9d:ca:cf:97:e9:e8:2c:cc:c8:aa:a6:
20:6d:83:04:d9:ac:f1:54:33:b7:87:01:9f:93:2c:a5:11:c6:
cc:09:bf:30:44:1f:eb:22:27:93:99:19:54:c8:b4:d9:f6:eb:
81:e7:d8:74:d4:03:be:67:09:cb:7d:56:47:92:cf:6a:86:b0:
f4:05:67:88:44:a5:01:3e:cb:10:45:41:10:0e:ac:e4:70:6d:
2f:e9:3d:c0:85:6f:b0:bd:56:00:38:e5:44:7b:a5:36:d7:42:
52:d7:76:68:74:c3:d0:a0:32:79:64:08:a8:7b:9b:d4:1d:1f:
cd:58:98:0e:e5:ca:cc:6e:38:33:98:ff:1c:c2:4f:d9:26:61:
c2:32:04:c1:18:24:de:fc:54:d0:93:22:19:d0:15:94:e6:df:
81:af:6c:1b:d2:70:2d:ba:a9:fc:0e:fb:c1:60:93:45:bd:f8:
0a:7c:82:d3:93:d0:42:58:bd:a6:b3:0a:92:d9:23:d0:bc:eb:
81:e6:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:36:35 2025 by rpki-client