Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cf5909-94a9-31eb-b5b4-ad15d6b2335f.roa
File: a4cf5909-94a9-31eb-b5b4-ad15d6b2335f.roa (raw, json)
Hash identifier: bkJhVkKaJPp1cdUH2UtmOEgTRCj4ex12NT3lS39MSBk=
Subject key identifier: 4C:D2:D4:05:B1:BF:63:41:5D:23:6E:CF:F6:A9:93:76:C3:17:1F:07
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409471B712585177B437C0F180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cf5909-94a9-31eb-b5b4-ad15d6b2335f.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:71:b7:12:58:51:77:b4:37:c0:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=ac3663a3-b73f-447d-aab0-c0092e548979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:9e:00:c3:51:c3:86:a0:ac:83:de:59:5c:
fd:7f:16:f7:ee:53:81:43:71:8c:3d:6f:44:00:c5:
76:be:88:f7:fb:bc:16:64:10:68:5a:9e:2d:b6:56:
76:ce:1a:3b:d0:27:f4:54:5e:1a:fb:05:11:09:d7:
b0:a4:d8:fc:cb:67:56:38:07:ab:84:45:e2:87:c5:
bf:f5:04:eb:68:a1:5f:e4:27:77:72:5c:a4:99:1b:
f9:b3:f0:58:f4:40:5e:9a:0d:cd:ad:37:d6:69:44:
b1:b9:eb:8b:4f:54:28:2f:fc:f4:ca:1d:c6:d7:d2:
2e:5f:82:51:1e:70:51:e6:43:d8:9e:63:ff:0b:d7:
cd:b7:fd:cd:3c:49:a3:53:72:64:81:2d:4a:91:aa:
c3:00:9d:23:39:52:4d:3b:36:aa:d3:eb:db:00:20:
85:76:0d:ad:d5:ef:37:bb:a6:d8:7b:41:cc:8b:20:
cd:13:7d:81:4f:3b:81:6c:ec:2c:09:9d:34:6e:da:
87:0e:86:32:3d:33:1d:fe:e7:1f:e8:35:59:b3:3c:
01:86:b8:1d:de:21:15:62:d4:ac:18:cd:8d:9e:9c:
9e:93:dc:d0:2c:7e:34:48:95:2f:03:da:fa:4d:b5:
e0:9a:7c:d9:95:5b:49:3b:fe:1f:45:f2:d7:67:b8:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:D4:05:B1:BF:63:41:5D:23:6E:CF:F6:A9:93:76:C3:17:1F:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cf5909-94a9-31eb-b5b4-ad15d6b2335f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d8:f4:29:92:37:9f:79:a3:75:e2:21:3c:ba:48:45:89:73:
7c:b7:63:1e:3c:5e:f4:4a:19:27:7d:0d:0e:5c:5b:05:03:80:
72:e4:13:07:84:6b:7a:35:bc:1c:30:02:4f:27:0c:79:9d:18:
cd:36:0d:35:a8:29:aa:48:2b:bb:49:84:0a:8a:ae:32:50:ef:
08:c3:c5:bb:4e:cc:df:c0:7d:bb:0e:46:44:c7:30:b5:83:bf:
6b:33:ef:b8:e4:84:8d:b6:c3:ef:10:f5:88:f8:01:4c:a0:c0:
63:52:96:34:db:81:02:30:d1:c9:7b:4e:a7:5a:ae:ee:f3:b2:
36:5c:4a:c8:7b:d6:28:31:e3:80:b0:b3:d2:f6:b5:42:21:f4:
59:a1:9d:a9:00:2c:ac:de:f3:00:de:aa:23:29:8f:28:89:05:
a7:a6:6a:7c:a3:ff:f7:db:ca:f0:c3:d5:29:aa:94:53:7c:f8:
42:eb:db:af:71:59:c2:f2:8d:c8:1b:95:d6:44:be:4c:bb:94:
65:8f:57:37:e2:68:5d:05:8c:c1:1f:b5:ba:2b:a8:cf:67:74:
b0:b9:6a:24:45:69:d8:51:f9:bf:35:ab:ea:23:c5:06:72:56:
73:39:88:78:1f:a6:5b:d8:63:80:2a:7e:b8:99:38:04:0f:79:
22:f3:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:51 2025 by rpki-client