Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c105dc0f-fb07-3538-b688-3d9c9d8e3e84.roa
File: c105dc0f-fb07-3538-b688-3d9c9d8e3e84.roa (raw, json)
Hash identifier: uTW4FU0RJY7GYvuq2/ZGvXnKN/WaZXPCWtx7dV6Aw1o=
Subject key identifier: 18:58:37:42:E9:EA:B1:AE:C6:10:9B:92:05:53:58:CC:A7:76:33:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3240029ADCBA907D8C07FD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c105dc0f-fb07-3538-b688-3d9c9d8e3e84.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:40:02:9a:dc:ba:90:7d:8c:07:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=68d2b150-8b5b-4d34-af19-4f856200a26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:82:df:d4:dc:05:2d:3c:10:20:e3:d9:4a:
78:33:b7:e7:f2:45:d8:b0:9e:a5:56:bb:b3:5b:34:
33:6f:68:11:76:95:de:21:50:84:03:6e:fa:37:78:
5b:c2:3c:fd:4f:a3:43:c1:23:48:3d:2d:9f:5c:8c:
55:55:8d:c4:ee:4e:f3:ba:19:b7:d1:b1:a2:4b:48:
84:c9:13:1f:1a:06:55:85:59:9d:88:e3:42:43:81:
2b:c7:f6:dd:d8:be:0e:4f:fa:f0:1b:19:7d:0d:be:
db:33:4d:9b:e0:2e:40:db:93:f7:ef:c5:f0:b8:2a:
6a:3f:ba:73:4b:fa:b6:8a:aa:12:55:d3:1a:08:09:
10:cd:02:01:80:65:7d:43:c9:f0:60:8e:c7:32:5a:
46:d9:50:75:59:bb:0c:86:31:34:2b:a7:05:f2:94:
cb:9d:d0:5d:2b:bc:29:e6:e3:c4:5e:95:65:ad:cc:
c3:83:ed:19:52:4b:db:82:59:5c:d3:64:03:c9:63:
99:93:05:8a:7c:b9:7c:db:b5:9d:73:d4:bc:df:e4:
b1:8a:3b:36:69:45:6a:08:52:a4:8d:10:f0:27:81:
70:88:ec:03:f7:7d:7f:58:04:1b:76:0a:e2:84:3d:
b5:b6:8c:d2:45:04:e1:69:34:93:a9:2b:e2:15:0d:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:37:42:E9:EA:B1:AE:C6:10:9B:92:05:53:58:CC:A7:76:33:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c105dc0f-fb07-3538-b688-3d9c9d8e3e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:05:3c:59:71:6c:07:79:49:50:f1:ff:fb:92:a5:c8:61:2c:
16:1a:40:14:b0:f7:b0:3f:b9:43:b9:11:e4:98:77:77:5d:81:
a2:5d:be:33:c2:04:d6:ee:0c:7a:ca:ba:c8:5c:dd:c3:26:c6:
7e:a3:cc:13:31:b1:d9:61:cd:94:60:f2:ec:fe:60:a9:5d:8e:
59:7c:df:0f:db:61:22:49:c3:a4:7d:35:ce:4b:b1:62:1b:5d:
d8:7f:f4:1c:3b:b6:b4:79:4a:20:1b:44:80:48:28:25:b6:f5:
e7:8a:72:d5:39:ec:6e:43:ee:ff:ef:45:07:83:1d:da:17:f8:
0a:7a:6d:81:fd:8f:cb:c2:85:cb:ff:d6:22:c7:c7:5b:c2:34:
3b:f5:db:1f:95:21:be:5c:0a:7a:1e:fe:5d:68:d0:00:42:f7:
19:43:22:b8:58:bf:03:b7:d1:e1:6a:15:08:f4:be:02:46:c9:
85:bd:4e:32:e7:f1:01:e8:9c:f7:cb:a7:65:c3:55:17:cc:62:
bf:51:7f:ef:86:48:63:b0:4f:98:97:2c:0b:94:9d:01:70:ca:
a5:13:99:89:86:2e:7b:20:7e:a6:42:02:7a:aa:0c:b0:fd:f0:
f5:cb:45:d1:72:93:2d:7d:05:e9:36:8f:43:7c:cb:fe:f7:e7:
df:7d:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:28 2025 by rpki-client