Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0335cf1-5136-3d92-b581-7f968f82b191.roa
File: b0335cf1-5136-3d92-b581-7f968f82b191.roa (raw, json)
Hash identifier: h3nHxZDa2bh4znJLPf5QeHisMlxjrfWbK0arY6xUO5Y=
Subject key identifier: 3B:C0:38:54:2D:17:CB:45:9E:53:D5:F0:01:62:47:8E:F9:6A:82:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584040CEC52A3953666C50E9C100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0335cf1-5136-3d92-b581-7f968f82b191.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:ce:c5:2a:39:53:66:6c:50:e9:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=662198f4-2040-4317-ba8b-473156f845c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:2c:d9:69:5d:c1:21:83:05:be:d7:06:08:
e6:6b:b6:56:ca:71:ed:8c:5c:c3:96:72:94:e7:ca:
77:39:a4:e8:c4:c6:9c:6a:ef:c1:9b:33:6e:79:0a:
1e:2e:46:47:79:49:7c:6a:5d:0f:7c:70:34:77:b1:
45:b7:c8:69:30:1f:4b:ac:16:d2:89:d7:1c:65:42:
c0:3b:88:00:01:bf:3c:47:62:8e:9b:40:7e:1c:1f:
ab:1b:b5:7f:3c:58:34:cf:10:33:be:f7:d7:42:6c:
46:db:29:9b:e2:2a:dd:27:75:fa:dd:ed:6e:55:85:
27:31:63:50:84:4a:4e:62:62:7c:ab:76:9d:1e:98:
2a:c8:cf:52:1b:c8:96:10:6d:1a:7a:83:4e:e2:b1:
ab:f9:68:94:bc:1f:e7:f8:0e:d6:2b:dc:06:2f:6b:
d2:5f:d0:f7:ca:9e:7b:8f:0d:be:b6:7a:f3:05:bb:
6f:55:65:9a:e9:ad:f7:c3:7d:e0:c5:9e:39:ce:c7:
7a:9c:44:67:0c:0d:f5:30:09:ea:f1:8f:56:26:b6:
6d:8c:b5:f5:31:6a:46:36:bb:0a:24:de:9c:dc:d2:
67:28:97:5b:cc:19:02:bf:9b:19:b3:6e:4b:c7:06:
09:17:64:bd:af:44:b4:1d:7b:fa:e8:3d:df:1b:7a:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:38:54:2D:17:CB:45:9E:53:D5:F0:01:62:47:8E:F9:6A:82:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0335cf1-5136-3d92-b581-7f968f82b191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:21:c8:9b:b7:0e:78:20:01:6e:c6:c0:03:90:11:52:89:14:
72:f2:87:a3:3e:0a:40:bd:3d:64:58:cd:d2:42:51:70:dd:ae:
f4:9f:8e:e5:a7:15:25:4c:f5:9d:67:79:9e:be:58:26:99:85:
a6:94:3d:2f:2f:d2:0a:c2:9d:15:8b:61:3d:ba:2e:d0:1f:af:
32:fd:6f:51:fc:04:39:8a:f0:3a:50:02:85:69:92:c5:c1:5a:
40:fa:a2:8e:f0:0c:48:78:5c:a6:64:bf:63:dd:ad:4b:95:40:
16:c1:a9:8d:e3:97:d6:45:05:c6:19:db:bc:b7:a2:79:9b:cd:
f4:46:5c:66:46:e1:8a:16:c4:d0:21:ec:45:f1:f1:2d:ab:a3:
74:91:07:23:e2:bd:3e:89:bb:03:2f:25:2c:ad:5a:a2:dd:25:
6d:75:fc:ea:7f:86:68:05:31:60:9e:5c:67:eb:ee:d7:d7:c5:
16:dc:08:0a:b2:9b:c9:b4:1e:26:ad:37:31:20:58:e6:68:00:
82:9f:03:11:85:a3:44:85:c9:ca:e6:90:08:a0:06:99:b1:68:
4c:c3:4f:66:f9:8b:41:78:19:d0:47:82:ba:1c:0b:75:a6:8e:
a6:e1:3a:c9:22:55:35:2b:1a:2f:15:14:eb:63:5c:74:84:bc:
44:b1:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:13 2025 by rpki-client