Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aee4f255-bf6f-3134-949b-e0e064e667e2.roa
File: aee4f255-bf6f-3134-949b-e0e064e667e2.roa (raw, json)
Hash identifier: bd4JGOhLip9E4Y8rbqA2cutxevWYKwOV2IUKWx428sA=
Subject key identifier: 03:6C:9A:5B:5B:01:43:B4:C2:49:8E:37:02:A8:D7:35:1D:CD:8E:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C6DA9EADF09DC5478F72E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aee4f255-bf6f-3134-949b-e0e064e667e2.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:6d:a9:ea:df:09:dc:54:78:f7:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=186a3699-dba0-47e6-b511-470f69769caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:07:46:09:d2:d7:10:08:e5:10:2c:ec:69:
9d:61:5a:ac:4d:28:3c:a9:13:0d:b2:5c:20:06:c3:
a0:46:98:97:a0:b3:1c:76:99:d4:2e:12:be:28:77:
b6:49:1d:c5:3a:01:49:10:89:28:1d:ff:b7:10:32:
2d:ee:8c:41:38:7f:3e:e4:b1:e9:6a:4f:e0:d2:00:
eb:80:4a:e2:01:99:26:29:d8:ba:e0:42:68:6c:af:
02:dd:f6:4e:93:38:28:ee:04:57:ff:fc:95:ff:09:
00:6d:df:e8:68:b8:1f:39:d2:94:fb:8f:af:0e:c0:
86:57:5f:c2:bb:fb:82:eb:79:33:54:87:81:93:d7:
62:1e:c6:ba:a2:10:99:95:ec:3c:05:87:23:af:47:
e5:c7:02:ea:9b:a0:c4:b3:fa:d7:d2:82:51:3f:e5:
ec:27:ea:fe:3a:2d:88:03:d2:7d:54:dd:de:17:40:
06:f2:a9:50:9b:9c:59:b5:41:80:ca:a3:06:4f:97:
f9:f6:90:3e:1a:73:08:a0:44:65:d8:a4:1e:41:f3:
cf:c1:84:b7:a5:63:69:9e:37:f4:bf:01:b7:15:09:
5d:19:e9:65:53:0c:4c:8f:c7:86:af:af:b0:f8:95:
ce:7f:e5:6b:69:fc:e0:5c:0c:46:a0:40:23:12:26:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6C:9A:5B:5B:01:43:B4:C2:49:8E:37:02:A8:D7:35:1D:CD:8E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aee4f255-bf6f-3134-949b-e0e064e667e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:be:1f:d9:3b:cc:c3:60:2f:62:87:67:9d:29:2d:aa:8b:77:
83:2a:d3:4c:55:9a:46:c2:19:77:4c:b4:f1:dd:80:21:c7:8f:
b1:7b:5f:54:c5:af:42:0b:04:cd:be:0b:75:16:99:75:d2:45:
8e:3f:88:e0:01:1a:95:9b:1a:0f:53:ad:0f:6e:eb:7a:01:a4:
52:6f:8d:f9:25:70:e1:13:25:cf:e3:1b:24:2a:83:da:cf:b0:
73:4f:69:dc:e5:74:b6:b7:c3:76:6d:48:9e:4d:91:cb:da:53:
66:92:ef:58:d8:f4:65:e9:10:36:a0:45:ca:5f:1b:a7:58:af:
7c:81:5a:09:06:bf:39:b7:93:22:f6:62:2a:53:71:61:e7:65:
32:d8:bb:64:30:42:31:3b:17:63:55:ec:6c:e1:ee:db:c0:2b:
e8:5c:3b:77:78:9f:30:8f:c4:dd:6c:64:e6:87:de:d8:bc:43:
1f:50:c1:ab:67:b0:5e:da:98:ae:3c:85:94:ca:e7:0f:49:e4:
bc:99:cb:90:13:bf:12:99:9f:75:b1:bb:0b:0b:6b:c7:ac:7d:
02:7b:1d:ba:2c:f1:a8:79:e5:94:b5:4a:f7:d0:30:c1:14:49:
72:a5:01:71:ec:c0:b2:a6:b8:9b:4b:fc:ea:31:46:c0:5f:c1:
39:63:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:20:24 2025 by rpki-client