Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/befef9d4-70ae-3871-bebf-60a5049cb1a4.roa
File: befef9d4-70ae-3871-bebf-60a5049cb1a4.roa (raw, json)
Hash identifier: OlgoB8ewBCFbrIVJwUpy+j52RWJGMbUg57wbdHG8rC0=
Subject key identifier: 51:79:86:16:7B:D2:8C:D9:F6:15:A5:46:5B:6B:5F:DB:74:F6:F4:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB5A2E4678240C219A7BE0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/befef9d4-70ae-3871-bebf-60a5049cb1a4.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.183.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:5a:2e:46:78:24:0c:21:9a:7b:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=a51d3d66-3cd3-4afb-94ed-970de0479846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:be:e5:22:82:3e:c2:a4:89:57:93:7b:3f:
0e:01:f8:b2:d8:85:dd:29:90:82:ae:a0:11:c7:e9:
53:27:41:c3:cd:eb:57:f9:55:c2:68:06:a5:45:8f:
34:2a:ea:f4:74:21:a6:48:a8:e0:63:81:7f:33:18:
07:ad:0d:c5:97:fa:45:a2:1a:fc:62:df:88:6b:ba:
c9:b3:89:58:66:63:89:77:8b:f5:0c:7b:91:7b:5f:
05:54:72:30:88:06:1f:10:6c:c2:97:47:ed:48:a9:
cf:39:72:6f:fb:f1:6e:29:c1:1e:df:cf:f1:2c:e5:
85:1a:84:e3:41:00:88:61:dc:2b:02:93:af:02:f4:
a4:19:fe:b6:26:91:41:c3:bd:af:50:76:08:10:62:
29:5a:7d:50:ba:45:73:f8:cd:8c:a1:cd:99:a0:ac:
b5:ff:2c:68:6e:0e:cd:68:b4:5c:62:cf:21:18:cf:
ca:11:8a:3a:7e:48:cd:ad:cd:65:0e:cb:a8:3c:cc:
59:20:5c:7d:43:f5:83:57:f5:55:c4:3d:91:ba:03:
42:c3:bd:02:37:fc:ff:8b:e3:5f:c3:57:ce:12:56:
87:02:70:88:f1:01:59:10:31:e1:2a:a7:99:4e:aa:
ec:a8:9b:4a:96:b0:37:99:b6:a7:90:72:98:8d:db:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:79:86:16:7B:D2:8C:D9:F6:15:A5:46:5B:6B:5F:DB:74:F6:F4:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/befef9d4-70ae-3871-bebf-60a5049cb1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.183.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:13:0a:67:3f:00:c2:66:a1:42:a4:27:aa:20:80:2c:83:d5:
d9:57:b1:e7:47:fd:68:a3:97:aa:a7:e9:d6:51:60:f6:ae:5a:
55:8d:c0:2d:61:b8:85:7a:c4:d8:35:c9:e9:98:67:47:cc:27:
78:ef:42:a2:5a:a0:30:34:b5:36:3b:08:2b:89:75:5d:da:72:
8d:66:9c:44:52:4c:6a:55:49:e3:35:b3:6d:9c:88:c4:fc:03:
20:13:22:52:09:ae:c6:82:86:70:23:24:22:2c:9e:5d:cf:93:
2b:d9:e5:0f:c0:9c:1d:e1:9e:b5:92:0a:26:74:36:e5:dd:d0:
74:32:a6:0f:5a:fb:59:17:31:aa:2b:a0:3a:8f:e8:31:12:4e:
35:fd:d8:dc:c4:ea:b3:40:ae:ca:fb:a4:48:da:d2:79:2c:4d:
c9:f5:c6:9e:46:ab:03:26:f8:e7:c5:d4:03:b0:b1:bb:d3:2b:
4f:5e:6b:09:2d:cf:fb:72:18:c0:d7:3f:7d:df:cd:da:5c:ec:
07:d3:9a:3e:ae:0d:30:f2:2e:7e:d7:a9:d8:fd:a7:d7:60:a5:
3f:05:46:a2:ce:b8:fd:bd:70:94:c2:da:93:ad:fa:54:88:fb:
1a:08:ba:77:11:cb:28:b6:f0:78:9f:c2:0d:40:a7:11:3f:3b:
b7:27:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:09 2025 by rpki-client