Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb492048-4c98-3a66-a661-69a5b358e8e5.roa
File: bb492048-4c98-3a66-a661-69a5b358e8e5.roa (raw, json)
Hash identifier: +djNi+tObll1+VWa8qkERT44vY1dLkHJRJPmXwLVRbg=
Subject key identifier: EB:08:7D:07:7F:77:CA:E6:7F:1A:E8:00:3F:E4:7B:E3:18:65:A5:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D979244B0DCD9BCA34806A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb492048-4c98-3a66-a661-69a5b358e8e5.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:97:92:44:b0:dc:d9:bc:a3:48:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=a4795d2a-e05a-458c-ae55-132df4edfcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:17:7e:02:e4:ce:75:7a:7d:fc:86:0d:c0:
52:b5:00:fc:57:d0:20:a5:bd:1d:79:58:61:d8:e2:
31:cb:cd:08:d1:48:90:00:17:aa:01:69:29:b8:a2:
b7:17:d9:bc:70:19:06:4a:95:cd:6a:97:df:29:d0:
3a:58:db:e9:f9:ba:07:c2:59:ce:e1:77:a8:5b:da:
9f:fe:a9:a2:10:32:97:a3:5b:35:51:7d:47:98:74:
f1:24:84:7a:84:96:1d:5c:19:90:52:71:1f:f9:cf:
c8:c7:dd:29:7a:1a:d0:0c:69:d9:55:f9:d6:18:ba:
db:63:86:f4:bf:23:ab:d7:9e:ca:25:67:18:ac:72:
59:27:61:92:c5:90:86:8a:5e:fa:a6:ae:02:bc:e0:
7b:b9:e3:da:19:5c:56:b3:f2:90:b1:a6:8d:3d:50:
99:a8:5f:81:30:41:1b:54:c9:e6:d4:51:79:91:5c:
db:c7:da:d2:7a:73:df:fc:aa:e6:f4:6e:08:5f:75:
dc:f1:31:8a:d6:1f:3a:5e:14:c3:70:74:af:27:eb:
77:d4:6a:fb:a5:e5:ed:82:35:1c:b5:cb:50:a8:87:
0b:d0:bd:b9:37:d7:b5:9d:12:26:c6:c3:a5:5a:9e:
58:62:4d:52:8b:97:ea:82:9a:bf:2f:73:b7:a2:42:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:7D:07:7F:77:CA:E6:7F:1A:E8:00:3F:E4:7B:E3:18:65:A5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb492048-4c98-3a66-a661-69a5b358e8e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e3:25:64:1e:48:06:cb:ce:d3:03:57:dc:1d:21:d2:5c:4a:
6b:18:66:a5:ec:90:cc:ad:ae:aa:c8:46:cf:89:52:bd:86:02:
5a:53:a4:05:d0:27:d5:3f:73:c6:22:c7:97:79:d7:2c:ec:4f:
49:c7:a7:8b:6b:e7:0e:e7:5f:fa:64:d1:46:c7:4d:03:c8:db:
cb:11:6d:54:cc:49:5e:61:a3:18:09:75:b9:54:02:60:3b:28:
ee:3e:41:70:81:06:81:39:e9:85:5f:41:01:f2:39:8d:39:ab:
51:90:5a:6f:06:30:6d:54:1e:00:33:53:7e:e8:35:28:fc:15:
64:ae:77:ab:6a:d1:08:eb:89:a1:ac:9c:be:cb:4e:8c:22:e4:
92:bb:d6:09:66:38:19:f0:8d:a8:3d:d5:b4:8e:fb:a4:fb:e2:
12:f4:b3:69:a4:6a:91:7e:79:64:56:76:30:78:43:39:24:6c:
8d:cc:81:58:80:1d:74:c7:21:09:8c:2f:6a:c1:df:1c:9f:a4:
3e:e5:62:88:6d:b4:34:66:cd:a7:d9:20:5d:13:15:9f:16:ff:
b1:9c:dc:ed:98:2d:c0:d7:7b:aa:48:21:3c:b9:ad:28:5e:2a:
63:bc:17:6f:d5:a1:97:09:d2:dc:66:d3:5c:7b:b9:86:ff:5a:
25:47:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:43 2025 by rpki-client