Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4cdbd5e-b300-3e41-a96d-e7a7efb04438.roa
File: b4cdbd5e-b300-3e41-a96d-e7a7efb04438.roa (raw, json)
Hash identifier: qBQdql4SGbUkqe5bfd5/b9koYUZJgS+RWlq4AAkUnIw=
Subject key identifier: 9C:D4:4C:D8:EB:F8:4E:99:CA:71:0A:97:EA:67:3D:D7:F5:F5:F3:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F82889073599AFCF6CB423500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4cdbd5e-b300-3e41-a96d-e7a7efb04438.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:88:90:73:59:9a:fc:f6:cb:42:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=2b432ea3-0724-4743-826b-fe5561b77fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:a2:f2:03:26:21:c4:71:42:b9:3e:b2:74:
85:b3:54:fc:19:ec:54:87:9b:b0:01:d1:c1:19:d0:
71:4c:ec:f2:32:fa:89:7c:b4:ee:c1:b8:01:7b:88:
82:d3:08:0a:45:51:f7:dd:6f:59:c9:c7:fc:50:81:
ab:4c:16:72:70:e5:ba:23:40:a6:2a:24:84:71:4e:
f3:53:e1:3c:a3:ba:d9:8b:ce:e3:d6:65:94:bb:81:
aa:43:5c:74:fc:c5:3b:d3:79:93:28:d8:5f:a3:3c:
cf:2b:8e:ec:dc:55:07:92:67:ac:6b:e6:18:10:9b:
88:0d:08:95:3b:f8:be:e3:e3:90:a4:07:17:25:de:
1c:7f:bb:07:03:4e:49:3a:71:f1:a3:28:5d:c6:bc:
00:16:20:d2:de:b6:c1:8d:2b:3d:f3:9f:f0:bb:54:
34:34:6f:6c:ee:c7:b7:10:5f:d6:da:ae:60:2e:e1:
af:76:06:84:c6:7b:0d:09:88:28:5f:de:ec:00:9a:
46:db:58:dc:05:98:e5:8f:c4:88:d3:21:2e:a9:81:
24:db:48:8c:b2:d8:07:8a:31:5d:48:fc:df:e2:d1:
7c:10:ca:5f:fc:48:8b:96:80:5f:9f:c7:9d:dc:07:
1c:54:2d:c8:ae:05:fc:6e:9f:04:c5:6c:f8:ec:3a:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:4C:D8:EB:F8:4E:99:CA:71:0A:97:EA:67:3D:D7:F5:F5:F3:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4cdbd5e-b300-3e41-a96d-e7a7efb04438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:28:3b:0c:45:4e:f7:f0:5e:b6:19:c1:b7:ac:53:5e:16:64:
86:91:d3:24:ed:a0:3e:32:16:df:89:17:86:c6:2e:cb:cd:9e:
8c:2f:21:ce:3a:8a:e2:72:8d:c4:e7:b0:ef:6a:f3:65:73:0e:
6c:b2:c8:15:72:94:9c:04:36:51:b5:3b:9c:a7:81:f1:a4:05:
aa:b2:2f:ff:f8:5e:46:f2:41:03:36:67:65:c8:e5:fa:8a:be:
b2:57:f4:4d:c0:69:1f:22:f8:46:6c:e4:59:6c:ab:98:be:b1:
b8:a7:65:ee:62:14:0c:54:e8:9b:d9:71:47:d4:98:e7:08:80:
13:dc:2b:c5:7d:20:7d:be:10:90:d0:43:13:29:74:31:0a:50:
46:15:10:9d:0a:94:b5:76:01:58:2a:3c:2b:18:92:d3:be:ca:
10:d6:30:98:2c:46:03:99:96:1d:15:c3:a8:c7:61:2d:6a:4a:
3e:fc:55:2a:c3:ea:9c:84:0a:fb:8c:4e:ea:26:c9:99:04:96:
a2:8e:0d:10:e2:d1:5e:a0:89:5b:57:f3:b5:fa:d8:31:74:dc:
39:29:be:d0:a1:b6:bd:69:a4:90:2d:3e:a8:e0:b1:2a:51:5c:
53:4f:aa:b1:8c:66:4b:cd:22:b6:44:66:35:0b:40:e4:48:9c:
71:34:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:08 2025 by rpki-client