Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3475cd9-2eaf-315d-998c-6788b7022855.roa
File: c3475cd9-2eaf-315d-998c-6788b7022855.roa (raw, json)
Hash identifier: DZyQYpy+Zt5Ns7YqjOQk/HU1FTm9DLaRA/IgrkPVJ+Y=
Subject key identifier: 59:EE:DA:BE:87:A2:30:4E:CB:3F:F1:A2:28:1D:24:D4:24:E7:95:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E929E5C6FA3FC09525191B680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3475cd9-2eaf-315d-998c-6788b7022855.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:9e:5c:6f:a3:fc:09:52:51:91:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=f7515ff5-e958-4d45-be74-5a4db6d6dcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:b9:4e:03:c7:f1:87:1d:7a:48:ee:82:c8:
c4:c7:e3:9e:57:96:6a:e6:7d:d0:46:f5:30:d1:b0:
d9:2f:30:d0:29:b0:86:95:f7:72:2e:1d:24:7a:65:
3f:b4:02:f2:bf:61:6e:21:c3:6f:a4:e7:f9:f7:2b:
ff:1c:b9:c8:f6:96:eb:91:23:cc:b5:c9:7d:d4:be:
c3:59:68:1f:1a:ef:32:b1:aa:7a:a2:e0:0f:d1:ad:
b4:56:7b:69:59:51:85:98:f3:60:dd:6f:aa:a3:20:
06:f2:06:69:1d:ee:1c:5b:c1:be:79:a1:25:d9:b5:
e8:eb:85:bc:e5:bb:55:1a:bf:fe:a8:4a:2e:75:9f:
f5:08:8c:ea:f3:ec:ba:7d:02:cf:9b:e1:ea:09:69:
bf:03:57:75:cc:74:ce:fa:89:0f:6f:60:6c:18:1e:
4e:81:37:69:c1:4a:eb:a2:a4:c9:b8:69:d9:b9:d7:
07:ba:87:92:81:c7:8a:33:bc:2d:c9:09:cb:9d:75:
f1:6e:08:e4:29:4d:3b:4e:ec:12:6f:14:74:f2:37:
60:0f:3a:58:4e:c4:4b:d6:38:22:25:d2:b8:09:74:
67:ca:cd:0f:fc:7b:49:7c:73:52:25:60:29:77:7a:
6e:00:50:cf:4d:98:93:c4:0c:2c:3b:b6:ef:1c:b5:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EE:DA:BE:87:A2:30:4E:CB:3F:F1:A2:28:1D:24:D4:24:E7:95:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3475cd9-2eaf-315d-998c-6788b7022855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:97:48:19:55:15:cf:82:ff:a7:db:53:39:71:9a:32:39:20:
98:6f:3e:20:bc:49:7f:9d:4e:1a:33:fb:e6:4a:96:0d:1b:f6:
9f:8f:2f:5d:5b:f4:6d:38:07:47:02:c4:ca:92:f6:5d:15:19:
2f:4d:74:87:2d:b8:96:84:40:ed:05:83:05:fa:3e:ed:ff:83:
7c:f2:81:02:a0:ad:97:63:a3:26:10:68:d9:43:bc:21:e3:82:
c4:3f:7e:f3:43:58:5f:23:a2:d4:f0:49:22:89:d1:8a:75:a1:
f0:60:0c:ac:89:2c:ae:6e:9f:1c:94:72:95:ea:40:18:a3:de:
15:d3:ec:94:d7:0c:c4:c4:0f:fc:ea:13:74:af:91:ae:3c:3e:
f2:77:82:34:e6:82:b9:bf:af:da:7e:cd:4f:50:55:78:a5:eb:
20:bf:b1:ea:01:3d:f4:3e:f0:58:56:8b:e6:ef:a7:c6:45:40:
42:92:af:70:ef:c3:16:5d:e8:bd:45:00:05:fc:cc:48:35:8a:
e8:42:bd:6a:15:5a:26:93:db:aa:06:9a:fd:84:28:95:c5:d1:
5e:df:1f:56:46:4b:21:a8:94:04:70:2e:06:84:57:a3:4f:73:
94:c0:13:38:de:ca:64:b8:3f:94:13:a8:e0:bf:1d:a8:a3:57:
80:66:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:33 2025 by rpki-client