Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01f0beb-e115-3a78-9357-23bb2784244f.roa
File: c01f0beb-e115-3a78-9357-23bb2784244f.roa (raw, json)
Hash identifier: PD6XLWEPMaGsOtELoFmVaAvJLf+mHv2YveKsa9tiiS0=
Subject key identifier: BA:49:31:F2:AB:34:BC:B6:0C:94:D7:35:72:C5:4C:80:3A:98:20:0E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584040329857F64D742EDFAE3D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01f0beb-e115-3a78-9357-23bb2784244f.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:32:98:57:f6:4d:74:2e:df:ae:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=c5113052-cebf-4618-943d-bfa1cd6d8514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:8c:7f:a7:fd:f6:0f:a5:8e:1c:05:b9:60:
a9:7f:c8:04:70:dc:02:16:58:d2:e5:b4:73:1e:42:
66:25:7e:2b:fa:bf:07:11:d9:cd:9e:d6:71:34:df:
74:1a:85:03:12:45:05:b9:d7:df:a8:ac:03:75:6c:
bf:5e:a0:10:65:bf:50:ac:e6:ba:79:45:b5:6e:37:
45:d0:58:26:62:7b:49:5a:16:2f:de:77:8e:54:95:
78:a2:9b:7e:62:a7:bf:b2:2b:2f:80:69:31:7d:0b:
e1:c0:29:ed:f3:cd:f8:09:e3:55:16:c5:20:3c:41:
63:66:64:fd:d4:52:5d:27:5d:f8:dd:94:fc:60:6f:
5c:16:c6:09:1f:b7:79:66:c3:75:e5:2f:bc:bc:b3:
12:ee:1e:97:29:af:4c:43:7c:fe:18:18:1d:b0:d0:
9e:4a:10:c7:f0:a3:0e:03:07:a1:5a:88:8c:da:e0:
0a:7f:ff:75:0a:97:91:7b:b0:fb:d9:32:9d:2f:12:
4b:7c:7f:96:a5:25:8c:08:04:47:4d:62:a6:6c:89:
12:16:56:75:ce:2b:4b:3c:02:67:1d:e3:ef:5f:3e:
19:af:d1:20:50:fd:aa:d0:77:78:73:02:02:b1:03:
ae:ad:7c:bf:02:9a:49:91:62:05:af:8a:06:d5:63:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:31:F2:AB:34:BC:B6:0C:94:D7:35:72:C5:4C:80:3A:98:20:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01f0beb-e115-3a78-9357-23bb2784244f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:92:f1:2a:4b:6f:72:89:bb:11:39:aa:8d:c9:4b:d0:94:6c:
8b:60:50:e4:7c:d4:e3:b9:c1:0b:33:cb:cc:b6:84:10:50:92:
13:bf:5f:1a:02:b0:f2:1f:c9:07:45:d9:ba:80:ee:af:64:08:
59:ee:30:de:0b:ae:de:f5:01:eb:d8:b1:2a:b3:cd:85:8a:23:
f1:8c:e6:9a:ff:46:ce:3d:a6:53:db:45:9c:ce:ab:b7:8d:46:
1c:2b:4c:c9:95:fa:f1:b6:dd:e6:52:15:8c:54:c0:9d:b0:cd:
4e:5d:ab:58:f8:5d:2e:1c:67:80:2d:36:65:b4:c0:c0:a5:f3:
64:94:db:0a:28:94:a4:6f:b7:e3:36:d0:ee:f1:4a:09:3a:96:
51:f8:ee:41:dd:7f:ea:7d:9c:33:bb:60:08:6a:53:92:9e:b6:
a4:8b:8e:09:85:81:b8:a8:91:9b:fc:4d:e9:c5:89:99:5f:a2:
c3:5f:64:9e:ae:1b:b0:1b:9b:87:7f:57:e6:80:f1:e2:7e:79:
6d:46:4e:62:25:cd:6e:32:3e:f1:30:0a:8a:b5:10:ad:f1:09:
bf:9e:95:21:30:8f:72:72:4e:6f:56:ff:bb:87:b8:a2:d1:cd:
be:60:de:64:76:f2:9c:cf:58:f7:5a:39:77:9f:7d:c4:32:bb:
b5:75:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:08 2025 by rpki-client