Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6221726-77b4-355b-a77e-21f1ee516755.roa
File: a6221726-77b4-355b-a77e-21f1ee516755.roa (raw, json)
Hash identifier: sWsT6naB4GittgWf6wJo4NhJ4k33nw/v8xaxiUG38ZE=
Subject key identifier: 3F:E5:19:BD:C8:FB:02:37:52:24:4A:E0:69:61:DA:82:B0:B2:81:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EC83D652EB552DB6376C400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6221726-77b4-355b-a77e-21f1ee516755.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:c8:3d:65:2e:b5:52:db:63:76:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=e3a25f30-397e-4088-bcb2-4fb3c140c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:3c:19:e5:18:e4:dc:6e:9b:b0:0e:e7:fb:
b0:ea:90:5a:cd:71:7a:1e:78:fd:5b:bf:67:4b:47:
fe:86:3d:05:ee:3c:24:bb:75:a2:2f:f6:72:de:b4:
21:e6:21:2d:48:9e:a2:2e:57:f3:a0:9a:37:c6:e5:
8e:c5:7f:dd:a2:e3:55:bf:af:84:01:6c:ae:e2:58:
81:22:71:ea:9e:73:9d:a9:a8:b3:1c:3f:c1:23:28:
74:df:70:73:a0:7a:bc:e4:dc:6e:6d:22:aa:47:11:
c5:27:5d:95:af:bd:cc:9d:35:af:ad:41:46:07:c9:
9f:29:75:65:95:a7:7e:1b:a7:5c:2f:58:5d:18:fd:
6b:b6:45:c8:2d:d2:9f:c2:9c:52:1d:88:bc:a7:16:
0b:2a:e6:6e:4c:22:b8:e3:ab:cc:15:a5:ac:bf:79:
63:33:5e:98:86:c4:ce:73:a6:4e:4a:5e:c6:ba:fe:
d0:92:8a:92:d0:01:76:13:6b:6d:8b:57:cc:31:80:
be:80:8f:6d:4f:f7:1c:67:50:66:65:f0:a9:08:c7:
29:5e:0e:00:52:d4:7a:ef:b7:29:61:ff:40:b1:fc:
19:d6:9b:34:12:ae:36:b3:95:70:d0:ad:4b:b6:a0:
15:6d:20:69:88:4c:d6:f7:d4:ab:0f:dd:43:7a:f9:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E5:19:BD:C8:FB:02:37:52:24:4A:E0:69:61:DA:82:B0:B2:81:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6221726-77b4-355b-a77e-21f1ee516755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:89:1a:f8:f1:4d:84:d4:b7:21:26:33:7a:1c:9c:34:29:47:
71:3e:71:64:3e:48:1f:a7:d0:61:98:23:b5:91:8a:0f:87:76:
7e:f7:73:55:c9:f1:72:fc:80:5a:00:0e:87:b6:39:1d:5a:42:
00:32:7f:ca:c5:bb:90:11:a2:ef:a1:49:9e:36:f2:45:81:36:
52:65:c9:fa:98:0e:4d:ab:8a:31:92:44:88:e1:fb:42:0c:01:
25:b2:25:7f:6e:38:f7:33:28:3c:38:ce:9f:1d:63:96:b6:aa:
e0:d5:2a:92:10:eb:81:d5:df:3f:09:39:e9:7d:32:17:d9:15:
b2:e2:27:8b:e4:5f:ba:b6:9b:00:97:be:0e:41:7b:3c:f1:4c:
67:f2:30:c7:61:6e:3c:06:71:22:60:1d:a7:a1:ee:33:0a:de:
c0:8e:a1:8c:db:c7:b3:21:41:3b:ff:80:ee:c9:a0:6d:40:53:
51:ee:14:5f:9e:4d:86:61:7d:b4:d6:79:62:24:ad:c5:d6:bd:
5d:b0:08:e4:7a:81:ad:32:a5:47:4e:e4:08:aa:10:a3:7c:b3:
3c:e6:4c:17:30:7f:49:31:4b:0e:b9:2d:39:39:a2:b5:79:67:
06:77:d8:a3:cb:17:95:4c:cc:fa:5c:22:66:31:86:25:15:f5:
2c:db:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:01 2025 by rpki-client