Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a433d102-e3c2-3c58-9311-e33893881d1c.roa
File: a433d102-e3c2-3c58-9311-e33893881d1c.roa (raw, json)
Hash identifier: rpF0RwynB2nugWh72vAtiJDjwgp12WbbL9CTSi+NJ3s=
Subject key identifier: B7:C2:B0:3E:26:1A:FC:0B:07:3B:29:18:C4:9E:B2:06:7C:42:12:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0962B50B20650B09360AD20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a433d102-e3c2-3c58-9311-e33893881d1c.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:96:2b:50:b2:06:50:b0:93:60:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=0c9fc925-f2b4-4c89-9823-e490cb77b6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:be:e2:a7:ea:4d:82:6f:0b:e8:88:30:17:
04:99:cb:c6:1b:78:cd:e7:d4:dc:8e:e2:fb:d4:1d:
84:e1:8b:b1:01:ed:5e:25:fe:1c:d2:da:bb:9a:21:
e8:05:61:db:21:4b:f0:a3:15:0b:62:28:03:2e:a4:
75:ea:aa:2c:30:c1:4d:09:96:d9:ad:49:46:01:61:
14:7c:52:96:65:fc:b7:8b:49:99:b8:39:4d:c7:74:
fb:53:91:33:eb:33:9b:76:bf:87:88:86:66:a0:6e:
fe:a5:d1:01:30:85:9d:eb:ea:7c:2f:8f:60:aa:f8:
64:a4:cd:66:47:57:22:54:7c:55:96:ef:8b:f9:c6:
6a:dc:94:0e:5f:7e:eb:1a:28:61:fc:0f:e0:20:f3:
08:62:ed:e4:8f:b7:42:b6:ac:7c:d9:d7:40:c5:bb:
78:f2:e2:a0:9e:85:a3:6d:cb:63:55:48:76:4f:2e:
35:89:11:04:a6:8a:88:0a:23:2a:65:ee:87:31:cc:
08:70:dc:dd:14:7b:31:b8:37:72:25:84:8a:c8:2b:
94:89:84:5b:ed:c5:79:8d:f4:bb:1c:73:6d:b1:51:
73:41:48:e8:42:d3:93:6a:f1:d4:1d:71:70:9c:47:
13:1d:15:6d:67:1c:14:dc:34:cd:4e:ef:fb:3a:21:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:B0:3E:26:1A:FC:0B:07:3B:29:18:C4:9E:B2:06:7C:42:12:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a433d102-e3c2-3c58-9311-e33893881d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:92:ac:d5:5e:0e:c8:f7:3e:8d:12:8f:02:d0:01:86:5e:c3:
82:06:cd:30:d2:05:24:68:6e:94:bb:59:f3:70:31:64:fb:72:
46:e0:2a:86:f7:32:79:cb:ad:6f:3c:0f:35:41:f5:52:fe:86:
78:37:51:14:e6:72:db:19:f4:66:fa:4c:4c:25:2e:36:38:b7:
c1:ba:27:68:5b:a6:7e:c7:16:0e:93:e7:10:a9:84:78:11:f0:
bf:0d:70:a8:46:60:35:9d:76:93:4e:85:50:46:39:0c:64:ac:
03:68:ca:fa:27:d9:be:39:33:dd:95:82:62:3c:b8:bd:a0:73:
4c:a0:a0:12:a1:eb:ab:01:44:a2:8a:9e:8d:70:a0:a0:a5:f7:
d1:bc:d5:b8:03:0a:89:03:9c:ab:b5:84:43:75:21:38:9f:5b:
bf:ba:f1:b1:55:3f:fd:57:8f:57:d3:68:0f:1c:55:fd:49:46:
03:f4:38:5a:c9:8a:67:16:b1:f0:d1:39:e3:4e:32:40:24:c2:
fa:89:6a:3e:aa:0d:94:73:f4:28:f5:da:04:a4:31:56:17:ff:
96:2a:19:ab:07:7b:ac:0c:8a:55:46:14:ac:b7:12:62:73:3d:
f0:99:46:89:b9:19:34:cf:0d:a7:c0:4b:39:47:23:c4:02:b8:
cb:ba:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:33 2025 by rpki-client