Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b53ccbb6-ed25-3329-9f50-6e6b9e1ba295.roa
File: b53ccbb6-ed25-3329-9f50-6e6b9e1ba295.roa (raw, json)
Hash identifier: O8bNqhpV5Vdf3pL5cmQJziTpOSoA7Qp5+aN3kclouCg=
Subject key identifier: D6:1D:C1:1F:92:BE:44:0E:88:72:F5:4B:CA:67:5F:C5:99:5D:F1:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCBC224BDA56E0469A73F3100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b53ccbb6-ed25-3329-9f50-6e6b9e1ba295.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:c2:24:bd:a5:6e:04:69:a7:3f:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=b490bca7-f5ba-411d-9542-52e08cf10515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:43:bf:97:d9:7a:b7:78:91:41:42:a5:09:
82:25:78:6a:2f:fb:c0:7a:fb:cd:75:cb:18:e5:b0:
15:40:b8:9b:67:1f:39:d5:e7:0a:1f:8c:13:57:e5:
90:1f:6e:44:00:37:91:ba:f3:6b:ce:4d:db:4f:9b:
43:43:45:7c:4e:a4:63:9c:3b:02:7d:eb:c8:47:42:
8d:df:3d:22:97:9a:15:64:c0:41:af:e7:cb:f8:e8:
6e:61:f2:ee:a8:96:ff:2b:33:20:1e:56:60:8b:fc:
50:53:79:52:47:77:b4:8a:0e:5e:9d:b1:51:0c:14:
c2:ca:a0:19:50:6e:c0:d2:0c:d2:0b:bd:36:fb:8d:
87:46:55:ac:dc:43:5f:a1:0b:ff:ba:2f:a5:8f:31:
20:cc:e3:1d:cb:d3:16:fc:57:cc:bb:41:a7:12:d4:
21:66:6c:37:14:75:96:d5:fd:0d:24:34:f6:f1:ab:
d2:77:be:1d:ad:6a:f7:74:27:be:3b:e8:a2:26:02:
ae:b1:92:88:12:58:c9:bb:e6:56:4f:96:53:77:7e:
f4:44:46:18:64:4c:8f:c3:ee:c6:66:6d:7a:c4:23:
e2:e6:9f:ce:af:7b:f7:74:4f:e2:4d:b0:07:65:d9:
f2:83:8a:44:10:de:5a:1e:19:6a:be:dd:a3:c7:f3:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:C1:1F:92:BE:44:0E:88:72:F5:4B:CA:67:5F:C5:99:5D:F1:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b53ccbb6-ed25-3329-9f50-6e6b9e1ba295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:56:38:e3:72:40:71:60:6f:06:dc:70:b2:de:aa:36:e3:bf:
d6:c4:25:f7:39:cf:eb:dd:d2:bb:22:cc:36:98:2d:2a:9b:0a:
db:5b:cc:01:6d:3c:1d:38:19:da:29:2b:1b:dd:5b:5b:3d:38:
9f:50:5f:aa:96:ed:82:0a:59:92:3a:7a:ab:5c:7a:d9:dd:91:
5e:e9:a1:5c:76:5b:d9:1a:b9:5c:04:40:9a:8e:bd:cd:30:b1:
4c:71:f7:66:51:a3:cc:79:e0:f3:e4:5d:7f:fd:9d:f4:2b:5a:
dd:22:42:25:b2:7a:15:59:41:15:11:af:15:12:c5:7c:ba:02:
96:6d:56:77:0b:19:ee:3d:33:c0:5d:6b:75:24:9f:f2:c3:73:
8c:e5:45:7b:63:e8:de:dd:29:14:1c:05:cd:97:e8:d7:fe:c8:
1c:c3:ea:1d:be:47:83:70:f4:c0:28:82:3a:77:22:9b:67:d0:
9a:c3:44:4b:c8:8b:f6:06:bc:78:6d:c9:9a:3a:70:dd:8c:8f:
ad:eb:54:16:cd:c2:5e:84:c3:22:3a:3d:d1:65:c5:23:f1:0d:
84:ea:9a:66:b8:e9:b1:46:d3:e7:c5:f0:86:63:39:fd:dc:8f:
4f:84:b7:a7:2b:37:0f:d7:13:22:fb:62:72:db:03:51:da:1b:
90:09:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:08 2025 by rpki-client