Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae5bba7d-c735-3a3f-bcb4-f03d274edd24.roa
File: ae5bba7d-c735-3a3f-bcb4-f03d274edd24.roa (raw, json)
Hash identifier: VhyoYotUD0ZdYGFS3HPZl4RoNIVIUNd2o0JHxPVTBz4=
Subject key identifier: E0:95:AA:B1:FD:9E:98:2E:47:1D:09:B0:59:85:6D:31:F0:4C:BA:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406B35485281D12B2F5E4D07AB
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae5bba7d-c735-3a3f-bcb4-f03d274edd24.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:35:48:52:81:d1:2b:2f:5e:4d:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=530b10fa-ebf4-48a7-8432-c1326290ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:c4:b3:25:42:71:72:45:94:7e:4f:a6:59:
3c:87:da:c3:fa:38:d7:e8:33:e3:51:02:d2:f3:7c:
e2:a8:63:ca:1c:6c:24:e9:73:4e:1d:29:cb:04:d7:
97:3b:d3:a1:9c:19:5f:81:84:4d:b7:f4:29:f0:5b:
06:74:05:92:da:a9:be:b0:3a:15:d7:dc:45:0d:2c:
10:e7:55:56:6a:7e:f8:b5:9c:25:5e:5a:aa:ae:ee:
d9:da:cb:a4:90:83:d3:e3:6d:de:db:88:0a:e4:36:
54:3a:7b:3d:72:e3:5b:8a:23:dc:63:5d:64:c6:a6:
db:d2:03:c1:dd:5d:4a:95:c0:5f:59:99:a5:88:49:
d2:49:38:97:8d:44:8d:1a:de:2c:b2:65:83:2c:46:
1c:17:51:07:65:cc:56:b7:f2:79:ed:24:77:3f:de:
d4:d9:e8:70:94:ce:b5:81:69:65:a3:3a:dc:41:ba:
6c:6f:e7:73:3f:d9:5e:f5:6c:14:0d:69:5d:5f:be:
38:cc:bb:14:65:ef:86:67:fc:9d:a0:e9:ba:a2:c6:
e6:26:1f:8c:80:d9:06:12:b7:56:50:3a:73:c6:9f:
82:f4:7f:81:5b:dd:66:01:f8:16:8b:2a:dc:e7:77:
fe:14:2e:44:01:b5:16:77:6c:ed:33:b2:68:2d:cf:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:AA:B1:FD:9E:98:2E:47:1D:09:B0:59:85:6D:31:F0:4C:BA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae5bba7d-c735-3a3f-bcb4-f03d274edd24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d1:48:8b:b3:d3:41:89:35:c9:bf:4f:06:02:a3:96:08:a1:
36:1a:80:e0:71:36:11:7d:46:43:97:87:50:9b:64:d3:c1:01:
8a:79:a9:a5:df:a3:02:65:d1:62:9f:85:9c:ad:55:31:34:29:
d4:d8:74:a6:cd:d5:58:c3:25:e0:c8:cc:ff:b8:af:13:ff:9d:
b7:cb:ad:4f:8f:31:b5:da:d8:a2:91:04:ca:43:d4:1f:ec:b5:
17:37:92:82:4e:d0:7f:39:e5:77:62:57:34:7e:9c:d4:67:f1:
95:62:c6:93:c3:a5:1c:1a:47:de:99:30:d4:4e:94:8c:ef:e3:
72:a2:e1:99:7c:f0:4a:24:b1:95:76:a5:ae:e2:89:2f:0e:ff:
88:d0:d5:37:ff:fe:2e:68:70:f1:04:8a:75:ed:e2:71:66:81:
58:12:98:fe:6f:ef:ae:df:2a:44:d1:f3:0c:35:90:10:ef:4d:
6a:1d:0a:a2:26:91:63:6c:54:12:82:be:0c:92:7d:b2:61:92:
32:3c:6c:54:ea:4b:ea:82:f8:09:12:9e:e1:a1:ae:67:cc:1e:
06:fa:e3:a6:ca:71:ec:3f:2f:8d:5b:80:2c:1c:d7:3a:05:45:
ab:6c:e9:56:69:30:07:a6:42:d7:51:55:b6:6f:51:13:ff:cb:
02:53:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:00 2025 by rpki-client