Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c42755b7-30a3-3b91-bd09-b23d168b1f2a.roa
File: c42755b7-30a3-3b91-bd09-b23d168b1f2a.roa (raw, json)
Hash identifier: 0bFRKitKnpmEEx2uIbMT/PBmMVwoLUwOUime17lnI4g=
Subject key identifier: D2:EC:9E:6D:7C:28:AA:18:BC:4E:32:B0:2E:E3:C0:5E:94:CF:0D:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF9096ADC870850C39C861300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c42755b7-30a3-3b91-bd09-b23d168b1f2a.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f9:09:6a:dc:87:08:50:c3:9c:86:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=4880148f-b22c-436a-9385-746ea7986a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:e0:c0:ef:62:8c:7e:dc:3c:62:8b:43:77:
11:48:c6:60:83:48:94:f2:61:44:1a:58:67:fa:f7:
ff:32:bd:7d:11:2d:8d:6d:dc:40:37:7b:fa:14:5d:
9c:99:b1:0a:e2:1b:f3:52:78:04:75:67:b5:a4:32:
65:c5:ff:b9:6a:a2:e4:f7:8c:9d:ea:7a:03:15:b4:
8f:e4:19:4d:2f:87:19:7c:38:a0:26:17:bb:5e:ff:
3d:3d:5c:06:60:ad:bd:72:da:67:87:3b:6b:ec:b6:
de:c3:dd:db:98:a9:06:f7:cd:76:69:7a:8f:94:51:
71:f4:34:2d:7d:67:77:f2:43:0e:94:d2:47:6e:2d:
e1:6d:f6:80:29:90:35:51:e9:0f:5b:b9:8c:bc:2e:
6c:56:38:0f:3e:d8:a4:df:d6:2f:fc:d1:9e:97:bd:
7b:d4:3e:10:dc:46:e2:30:95:7c:bc:ed:05:b1:a5:
c3:b1:02:a7:a6:51:f8:84:66:c3:79:d8:95:fd:8d:
f9:ab:02:db:32:d3:9e:64:f7:13:4c:bb:2c:2a:3e:
4f:3c:6a:94:0c:d3:96:f4:f0:f1:63:d4:0f:fb:84:
fb:59:5e:49:8d:19:52:57:07:c2:82:ab:3c:c4:a8:
b1:8d:41:6d:6b:ae:7b:f7:38:41:61:32:f8:68:58:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:9E:6D:7C:28:AA:18:BC:4E:32:B0:2E:E3:C0:5E:94:CF:0D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c42755b7-30a3-3b91-bd09-b23d168b1f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:aa:a2:e3:79:5c:ed:fd:03:78:dd:4a:68:de:fe:ec:24:19:
21:d3:8e:b1:56:74:d8:b4:b6:98:33:5f:78:4e:97:99:c2:9c:
f6:96:ac:cc:cc:24:a4:f5:47:b5:76:a9:aa:50:f2:1f:67:62:
52:8a:a5:5f:75:c0:d0:e3:62:d2:22:b5:ee:4e:4c:cc:8f:34:
47:ad:12:2a:cc:e2:66:c7:82:41:e6:4c:50:73:0b:82:8a:7e:
42:76:19:12:12:60:4b:17:88:d4:e4:bc:6d:11:6e:4d:af:37:
f5:5a:0b:4e:5d:e0:75:a7:46:16:0a:1e:0b:9a:d0:30:8f:63:
30:d9:16:6c:81:cf:f8:c5:4b:2c:a9:29:df:c8:53:2a:d9:32:
0d:90:0f:9e:18:8c:eb:b2:ff:d3:89:12:31:5f:95:f2:84:6d:
de:b9:90:d5:f1:79:78:c6:4c:3f:38:c9:50:88:b0:57:4b:af:
7c:b8:a4:97:8f:44:16:16:27:2c:83:30:1d:83:3c:0b:bc:fc:
fe:09:cf:13:d0:8c:9a:95:f8:87:b6:28:70:62:2d:d4:a6:7c:
07:3e:87:52:bd:8e:4d:f8:8b:d2:fa:0a:f6:cd:f7:20:4c:fc:
52:16:d8:94:3f:0f:19:ad:58:21:17:02:26:a1:17:4f:93:d4:
2a:b4:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:52 2025 by rpki-client