Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5c00fa1-e056-308e-881b-cf8e851e07be.roa
File: c5c00fa1-e056-308e-881b-cf8e851e07be.roa (raw, json)
Hash identifier: Bt9LYQ+r7EHa2vE0P+MNiFfS3gVNrHsFYUyBfMXaIeo=
Subject key identifier: 94:99:BA:75:7B:C8:8A:50:C4:EC:B1:11:64:18:FE:2E:D9:E6:86:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7F912E7A55613F18E314CB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5c00fa1-e056-308e-881b-cf8e851e07be.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:91:2e:7a:55:61:3f:18:e3:14:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=9b43d6a0-82f8-4213-89fa-c296d5591b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:f9:1b:84:7f:a4:83:c4:4a:03:35:0d:58:
78:b6:fd:2a:15:68:11:49:e7:6c:f9:6c:c1:de:85:
70:7a:0d:ba:e9:6f:b7:89:5b:fe:e0:4e:08:8f:0a:
2c:e6:67:3a:3c:a1:ea:1a:08:8d:eb:d4:ef:04:1f:
43:3e:a0:85:ca:a6:45:4e:df:15:f7:85:5f:e9:2e:
87:3a:eb:7b:d3:d9:1f:dd:8a:6f:6e:e0:c3:ef:e9:
fc:99:02:29:1c:65:18:33:67:e4:95:7a:b6:a1:9c:
7e:1a:b9:86:7a:15:bc:97:3d:16:58:da:a4:27:f8:
d7:c2:5c:da:3d:67:e2:f3:c4:d8:06:f6:5b:88:00:
08:07:92:41:5d:55:6d:61:c5:2b:cb:9c:e5:80:29:
ac:56:58:c2:44:b7:5e:b0:23:a9:b1:11:cf:ad:06:
6b:e5:62:f4:58:a1:66:8f:f0:8e:d4:82:1d:42:fb:
a1:bd:e5:4f:ad:a3:3b:11:47:9b:df:af:7b:47:43:
71:22:6d:0d:c0:7f:93:9d:c9:60:d0:eb:5b:a8:94:
c3:8b:37:73:d8:f6:c4:9f:89:94:fa:c6:c2:2d:a0:
37:34:5d:7b:2a:f9:61:8d:a0:8f:20:04:28:b7:47:
f6:01:e2:b9:38:a7:8c:5d:ee:db:fc:a2:cd:86:3a:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:BA:75:7B:C8:8A:50:C4:EC:B1:11:64:18:FE:2E:D9:E6:86:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5c00fa1-e056-308e-881b-cf8e851e07be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:8c:80:0d:7c:d3:73:eb:ca:6c:60:17:21:df:02:73:2d:67:
89:cd:4a:6a:a6:5e:3e:c0:76:33:ca:af:58:3b:63:86:55:eb:
9a:1a:84:90:e7:1b:e8:e6:c6:b5:f5:19:99:23:0a:e4:6b:62:
22:16:d6:b0:a4:6b:0a:f6:2d:88:36:01:b0:a6:20:7e:13:6f:
4d:a2:4f:05:5a:f7:fe:a6:9d:31:24:63:02:f0:53:83:35:80:
da:7d:9c:a7:6b:8f:26:c7:18:3c:c9:5c:fb:5c:ee:0b:ae:8d:
57:04:e8:a3:fb:b2:54:be:38:fb:84:41:e3:8e:f7:20:8e:b8:
a2:b2:4a:c7:48:95:39:f3:32:d8:dd:8d:df:7b:64:d1:12:a0:
5f:97:3c:a5:3a:46:56:48:09:4a:28:74:1e:6b:9c:14:f5:e3:
28:8e:14:c1:7c:9a:62:13:bb:22:53:1e:92:78:9b:b6:00:20:
83:a5:33:4a:c5:04:8a:1e:a9:ee:c1:1f:ee:38:7c:57:60:ca:
5b:9a:4b:f5:45:71:5c:16:01:17:14:f1:b6:17:ec:ec:5a:c8:
63:cf:28:ab:bf:eb:05:1f:aa:6b:e4:9b:32:64:aa:43:ce:75:
49:b7:9b:2d:b3:aa:90:2c:11:30:b4:3d:99:c8:59:06:27:7d:
0b:29:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:48 2025 by rpki-client