Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a47e7dd3-7b42-307d-855a-f73c63ecb091.roa
File: a47e7dd3-7b42-307d-855a-f73c63ecb091.roa (raw, json)
Hash identifier: jJfQEZTjTaMWo819V9cgIdD8cG5oiTgzqXzRQKjynik=
Subject key identifier: E5:57:27:2D:F5:2D:01:6C:30:FD:AB:88:4A:4F:EC:CF:DE:BD:F7:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EC1400D29756E887FA94940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a47e7dd3-7b42-307d-855a-f73c63ecb091.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:c1:40:0d:29:75:6e:88:7f:a9:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=7a132f22-72f2-4ef6-95bc-a3e65801b683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:8f:ac:9e:7f:3b:2e:2b:e6:a4:8d:3b:c0:
b1:06:e9:53:a8:a1:9f:c4:f1:d3:8a:58:fc:b4:e5:
f2:b0:6d:c8:40:f1:5d:87:cc:f1:24:ea:23:dd:5e:
8e:39:74:86:5d:7f:7b:62:c4:b5:74:cd:a3:6e:18:
30:d5:62:d7:8b:b6:32:8b:aa:e3:c4:ba:80:c7:b7:
4f:c4:76:20:73:0b:77:59:bf:79:ce:1a:43:0d:45:
b9:f1:90:a7:de:b3:1f:9d:64:6b:ce:43:dc:93:de:
01:5a:33:c1:92:83:13:f3:f6:72:a9:d5:a5:ae:a2:
21:4b:55:e2:fb:da:5e:76:0e:79:02:47:f9:51:4e:
5b:2a:cb:f0:05:41:65:de:29:d8:bb:ba:bc:d5:99:
85:0e:75:98:3e:8f:95:b8:a9:13:48:9c:57:40:fa:
d4:de:6d:c1:b2:01:02:50:68:ec:83:39:1e:08:7f:
7b:f1:6b:78:bc:49:89:6f:6f:52:82:7e:1b:4f:a4:
10:b2:cb:d2:60:a5:f9:a5:9e:c1:f4:a3:22:5f:f5:
50:4a:77:13:24:e4:46:c0:bf:86:b5:57:6b:e6:f4:
f3:5b:df:5d:d5:08:a5:b0:6c:4b:66:00:29:47:4b:
76:41:a7:67:16:bb:18:c6:47:fb:1a:94:5a:6d:03:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:27:2D:F5:2D:01:6C:30:FD:AB:88:4A:4F:EC:CF:DE:BD:F7:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a47e7dd3-7b42-307d-855a-f73c63ecb091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:77:a8:76:c3:7b:2f:61:f6:e5:95:ce:da:09:99:7f:f5:7c:
53:25:08:52:44:c1:68:9f:81:3b:c9:59:eb:ef:d9:70:28:6a:
3b:96:d6:fe:f5:53:2c:c9:cc:64:3b:d0:e8:7f:3a:f8:18:9b:
94:64:18:79:41:9b:ec:a7:38:7c:43:e1:e7:ff:ca:06:e5:eb:
0f:55:10:e0:88:9f:97:c2:f9:60:6c:40:3c:2b:09:c4:b8:1b:
cb:ae:5c:05:17:9d:d5:41:76:a2:56:f1:45:98:90:c6:08:fa:
d9:cd:a9:32:f4:a4:a5:ee:dd:49:c5:43:2b:31:61:25:95:ce:
87:92:c3:18:e8:76:6e:8e:14:cd:6a:9e:e3:4f:9d:6c:95:2e:
3f:35:49:85:f2:29:65:f5:21:c8:bf:e9:ad:3d:21:6a:41:8b:
05:94:f3:e7:bc:f5:b7:29:f6:18:54:08:8f:f5:f9:13:24:82:
26:c8:88:46:b3:68:a3:c9:27:62:62:e3:cc:9e:b5:d8:50:b9:
26:ff:ca:50:05:f1:55:80:89:5f:64:8b:2c:88:0c:2c:c7:f1:
0f:d7:06:f8:89:f4:b8:b0:4d:8a:09:61:9c:75:3d:73:f0:f8:
02:dc:a1:cb:9b:96:9f:13:02:09:09:26:23:3d:db:f5:8b:b5:
a9:d6:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:43 2025 by rpki-client