Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2391b5f-24b7-3544-8818-a2e554efe4fc.roa
File: c2391b5f-24b7-3544-8818-a2e554efe4fc.roa (raw, json)
Hash identifier: x3Ycq+Q+/+64shJ5xl5WFLEzUFjIa1igR0spcDr+50c=
Subject key identifier: 87:7F:C9:04:6F:72:B7:8E:95:33:A0:22:C1:B3:A8:28:95:5E:F9:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB969B8864E34F96862612800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2391b5f-24b7-3544-8818-a2e554efe4fc.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:69:b8:86:4e:34:f9:68:62:61:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=c68a32d9-8a17-403d-ada3-f2d6274bc869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:70:3d:ac:7b:f0:61:c6:d8:35:d8:e8:96:
d1:2d:26:25:7d:7f:93:dd:63:4c:8d:b4:c7:3e:66:
2a:14:54:3d:5b:da:6b:db:1a:88:27:f6:a9:15:44:
f6:3e:2e:ca:4d:7b:9a:be:a4:31:57:13:1a:16:fd:
42:bf:b9:71:fd:dd:c4:ab:3f:67:91:4c:3d:d8:9b:
b1:39:d6:f6:24:c8:2a:f2:ed:65:ea:98:1d:16:56:
cd:a4:5d:8e:6a:db:a2:f8:52:23:eb:39:c5:c4:cf:
d1:bb:3e:51:48:d5:15:20:86:7f:e0:a9:c7:e3:59:
50:7e:d6:a1:f7:bd:32:41:dc:ca:3e:54:d6:3d:78:
f9:a4:03:7e:35:b9:62:a5:d9:97:fe:dc:93:7f:c8:
ac:4f:cc:52:3d:d0:df:c1:48:2c:0c:06:40:df:b4:
ba:d5:03:c2:a0:a7:b7:0c:76:7c:05:8e:81:a0:5d:
0e:40:14:67:73:8f:7c:0a:21:69:80:f0:6c:4d:6c:
e9:31:d4:02:82:c2:e9:d8:0b:a5:68:ec:9c:5f:c0:
d6:a2:f4:9f:f3:83:fc:73:ea:89:09:42:fd:c7:cd:
6b:a8:79:3f:03:4a:7d:0b:0c:2f:ac:ac:c5:14:49:
bc:54:d2:e7:d2:a9:5e:61:1d:28:78:0a:6d:68:41:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:C9:04:6F:72:B7:8E:95:33:A0:22:C1:B3:A8:28:95:5E:F9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2391b5f-24b7-3544-8818-a2e554efe4fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ab:e0:5d:8c:88:9b:f1:7b:f6:62:ca:0b:5e:69:f9:3d:d6:
65:e6:b7:16:df:35:0c:8d:d8:d3:ee:61:5a:8c:a5:cf:83:d1:
b2:6f:44:2f:8a:93:50:de:7a:eb:4e:d1:c6:15:bb:91:78:05:
0c:38:16:52:d5:af:d5:88:61:ad:81:80:08:32:35:4f:91:52:
f5:50:d4:f1:44:6d:e3:c7:73:0c:b3:51:8a:80:64:bf:ee:7a:
ed:01:00:98:df:73:ff:59:10:14:a1:80:e5:0c:f1:ea:a2:8b:
90:66:d0:60:c5:db:95:02:5e:4b:ff:e4:80:5d:b2:69:17:32:
45:4f:13:bc:e1:5e:e3:37:7e:41:97:55:5a:06:ac:1f:d1:f4:
df:41:99:b9:bf:80:7f:0b:33:d2:30:8f:75:21:4d:43:57:dd:
9f:95:66:02:c3:f2:f3:b8:8e:12:7b:a4:d8:0c:ca:64:95:df:
2b:0f:19:ce:46:c4:4b:1f:05:9d:fe:45:89:0a:e0:d0:2c:4e:
30:19:92:62:95:32:3c:d3:3d:b7:7e:4d:75:bf:06:bd:6c:9c:
bd:6e:fa:b5:52:fb:17:bb:d6:5e:4b:09:dd:f9:a9:98:bb:dd:
af:8f:df:d7:53:b1:31:7e:92:dd:9d:22:54:f8:3b:9b:2a:23:
eb:16:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:34 2025 by rpki-client