Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9ad3bfa-54cc-3fc2-8d47-5d16ee185a4e.roa
File: a9ad3bfa-54cc-3fc2-8d47-5d16ee185a4e.roa (raw, json)
Hash identifier: O4BFtDmGFlqf3DNGgdx+RZ5CUk/abT/OSmVUfUFHS70=
Subject key identifier: F3:59:63:D4:04:A2:52:48:E0:9C:3A:A8:7C:F9:AF:4E:8E:35:1B:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584068A6D3A515CA1C921AF4B080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9ad3bfa-54cc-3fc2-8d47-5d16ee185a4e.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:a6:d3:a5:15:ca:1c:92:1a:f4:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=7028536e-5c7a-4d32-830e-aee0175be319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:89:0b:f4:01:88:0a:c4:b7:ed:07:3a:78:
37:0e:04:c3:91:6a:b0:86:c8:86:4a:b5:6c:40:6b:
aa:58:80:6b:ff:ed:7a:af:6d:a0:c9:91:be:7a:27:
1d:20:a7:55:55:2c:62:14:9d:0a:b6:da:3f:70:df:
b0:0f:a8:77:ab:57:7f:3f:70:27:3e:d4:85:05:f6:
41:6f:a8:d6:e6:00:b8:4f:d8:45:06:ae:55:19:0e:
db:12:24:16:8e:a7:1e:e7:c2:f4:b6:d6:08:71:f2:
e0:33:5e:65:cd:38:5e:aa:68:b1:cf:86:4c:81:fe:
11:9e:3e:71:e8:95:f8:23:23:a8:4c:97:04:09:1d:
35:42:d4:51:07:56:ba:88:91:e5:45:d2:58:1a:83:
3b:79:01:b0:42:b8:79:d3:7a:5a:69:cb:18:57:e7:
db:0d:7e:e7:8f:81:11:0a:83:c0:6d:c1:24:5e:49:
5f:1d:a9:f3:7e:40:63:09:c8:82:a2:d0:ee:60:00:
25:38:29:6a:e3:6e:3a:ed:cd:e5:13:0d:de:bd:9b:
b5:2d:0d:59:f6:24:29:12:df:b9:d0:c4:85:22:84:
0f:da:88:09:ce:f7:71:06:69:15:55:49:27:98:1f:
63:21:f5:4b:85:29:8e:19:53:3c:44:2b:14:c7:cd:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:63:D4:04:A2:52:48:E0:9C:3A:A8:7C:F9:AF:4E:8E:35:1B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9ad3bfa-54cc-3fc2-8d47-5d16ee185a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:38:ec:24:4e:c7:97:d5:47:e9:a8:12:64:c2:5a:1e:76:26:
00:1c:2e:5b:18:9c:3c:a6:1b:40:70:7f:85:98:02:e4:e0:70:
db:ab:70:57:f8:fc:3d:b8:0b:f4:28:94:5c:cf:f8:e7:54:d6:
d8:96:14:3f:c8:2c:a3:5f:ee:b9:b9:bb:6c:85:03:d0:2f:3e:
11:95:ef:30:84:cc:f2:17:0b:1f:f6:a6:cc:3d:d5:45:29:9d:
05:05:26:81:4c:3e:66:33:cd:f8:4f:c9:32:be:ca:38:7c:10:
e6:0d:f2:b4:d4:c1:05:62:bc:58:69:ca:5d:4c:32:16:fe:65:
90:20:50:24:67:67:b8:87:93:39:ee:8c:c3:7e:69:65:7c:ea:
b0:1f:56:f3:32:f2:ae:1f:43:96:5e:ea:96:08:67:5d:e3:b1:
00:cb:6b:77:e8:5d:b2:c2:f5:16:fd:ff:d2:a9:3c:22:6f:d2:
b1:e3:7a:27:cf:b3:61:00:c8:b2:15:e0:90:1c:31:39:95:8b:
b0:9c:e0:05:5d:bc:bb:d7:15:a7:9c:3f:2f:96:98:ce:f7:6a:
5b:84:2e:87:2b:3c:32:da:a1:38:2d:41:4a:04:fc:9b:9b:b3:
e9:a9:93:c4:3b:aa:8f:05:03:6b:88:db:6f:7c:85:e6:17:8e:
0a:9c:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:36 2025 by rpki-client