Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b32f8e39-69aa-342b-bc5a-739928bda638.roa
File: b32f8e39-69aa-342b-bc5a-739928bda638.roa (raw, json)
Hash identifier: wBvZTNUO2muLhFyEnz+fZRnnqgKvwRAC/sEfdW3z1ys=
Subject key identifier: EC:B5:76:92:72:91:6F:AC:EB:E5:BA:58:29:D8:4B:01:C9:94:F6:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EC889F72A8F2F619312EAC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b32f8e39-69aa-342b-bc5a-739928bda638.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:c8:89:f7:2a:8f:2f:61:93:12:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=9ec1f257-f1ae-4197-8b83-36c89110eecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:ce:13:3a:84:52:a9:2c:d7:e0:92:f0:2d:
c9:d9:d3:3f:f8:59:56:9e:b7:61:48:a5:c6:30:23:
61:ea:d1:98:49:39:b7:16:2a:ea:40:9d:0d:47:4b:
b6:21:c6:b3:e9:ab:6a:fc:93:d2:20:b8:8f:3c:27:
b1:14:f6:fb:7e:0a:a5:57:25:83:fd:46:36:60:fb:
7b:fb:6a:f3:1f:04:ba:6f:8d:49:2e:fd:0d:03:45:
a7:63:9a:59:50:d5:a9:7d:90:dd:f4:2f:15:29:a9:
05:37:65:4d:de:7d:82:5e:fe:a8:bb:ff:da:40:4c:
80:da:d1:88:76:bf:35:3c:0f:d3:bd:a2:df:b8:3c:
01:ed:53:19:d5:45:11:71:b7:60:a3:d8:3e:02:61:
f0:bc:5f:21:72:a5:8d:33:69:ea:2f:91:6a:9e:0d:
1a:02:6a:0c:21:a1:52:06:62:e6:8c:39:fc:63:c6:
10:8d:52:95:40:57:b9:7d:ec:4a:83:db:e3:44:55:
f2:20:eb:8d:66:72:0e:b8:ab:8f:f8:63:32:39:7a:
43:7e:89:c3:22:ad:51:1c:91:42:b9:17:af:c7:e1:
62:81:0a:4f:9c:eb:e9:3b:24:12:9a:0f:b9:9f:62:
e1:97:dc:79:66:9d:db:0a:0e:d1:50:2d:58:6a:65:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B5:76:92:72:91:6F:AC:EB:E5:BA:58:29:D8:4B:01:C9:94:F6:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b32f8e39-69aa-342b-bc5a-739928bda638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d2:5c:a5:38:07:a5:1c:09:f4:c2:92:d5:04:14:e6:91:d5:
71:f3:cf:27:0d:ae:d8:be:23:4d:e5:62:54:84:23:71:4e:cb:
a3:c2:be:60:71:c8:13:be:0d:75:09:e2:66:e6:36:07:3a:b3:
08:04:c1:f1:db:39:5e:19:b7:43:60:8d:61:39:c8:fc:bc:99:
cb:d0:3b:7b:8b:46:e6:e1:9e:53:c1:6e:0e:66:e0:62:5c:96:
27:db:35:d0:86:77:96:ab:9f:09:c4:e2:3e:f7:a8:b9:e2:18:
d2:63:70:fd:83:84:a6:62:60:9f:5a:dd:7d:92:3b:30:f7:30:
1e:40:e5:04:0d:f1:d9:e3:dd:34:b1:c1:c0:ce:66:58:d8:bc:
7f:8c:e8:3c:3f:a1:77:33:92:2c:66:4c:b0:28:7e:de:b7:04:
60:4d:80:ea:44:8e:0c:0e:9b:cf:2e:df:9c:d2:fa:5b:48:f3:
44:fe:d0:79:46:43:44:e0:e8:df:35:d3:43:03:0b:af:4f:d5:
00:65:cd:43:a5:02:eb:c8:4c:c8:31:66:aa:57:4b:8e:e7:f1:
82:ac:0b:7e:d4:90:54:16:8e:22:4d:ea:32:0d:15:41:6d:de:
39:dc:aa:83:0d:2c:ac:41:6f:0c:f0:b9:4a:a6:5f:af:03:6e:
c5:c5:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:36 2025 by rpki-client