Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca200124-3502-3ce5-9c87-898ad7ce3ad9.roa
File: ca200124-3502-3ce5-9c87-898ad7ce3ad9.roa (raw, json)
Hash identifier: 3R/WjYx78yoq9W4weNP9c8y/V8aQiK1UMFUOtbzg4OU=
Subject key identifier: 89:B7:11:4D:FA:D8:1B:EA:1E:38:D1:B5:38:E1:BB:34:1E:E0:6E:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE54432E16277C92D8FBF5380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca200124-3502-3ce5-9c87-898ad7ce3ad9.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:44:32:e1:62:77:c9:2d:8f:bf:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=51a84990-e207-42a8-b96b-564d38a4b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:cd:f4:eb:71:ed:3b:51:79:a9:b8:52:94:
7e:af:09:19:ac:3d:aa:63:c2:de:d3:ef:91:5a:a8:
af:5c:eb:58:9d:5c:8c:61:da:99:b0:82:5e:16:98:
be:2d:4b:32:5c:f7:41:84:16:d0:6c:e1:1c:f2:91:
76:fc:68:d4:40:a4:40:1c:ba:b6:af:47:52:bd:12:
26:df:3f:d0:0d:e3:45:3c:5c:d5:8b:0e:f2:13:10:
25:31:2e:5c:9b:ee:e9:7d:90:1f:93:3c:ac:bd:dd:
73:15:23:79:b0:1f:37:e2:85:85:81:39:46:3a:75:
22:e7:47:d7:70:24:81:0d:60:7e:fd:cb:03:62:b8:
3c:7b:67:19:2a:8a:df:4d:63:ca:d3:a4:d7:b7:51:
27:fa:05:8a:71:23:ae:89:7a:fe:d5:a5:03:26:9b:
af:cd:bf:33:4d:42:cb:6c:95:2d:56:86:83:11:c1:
8d:dd:ab:87:45:2f:36:8c:62:bd:4d:5e:a2:d0:c9:
83:17:91:a0:60:f7:50:ac:7f:59:2e:cd:6b:39:03:
1f:37:11:ee:4f:81:eb:29:72:6d:8f:fd:c1:e7:53:
12:bb:41:b8:d3:f8:ef:41:1e:5d:a1:67:fd:bb:ec:
48:39:fa:aa:2b:28:16:06:74:1d:7f:12:a1:21:83:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:11:4D:FA:D8:1B:EA:1E:38:D1:B5:38:E1:BB:34:1E:E0:6E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca200124-3502-3ce5-9c87-898ad7ce3ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:3b:dc:f7:ac:15:b8:82:bc:1b:3f:1b:5b:71:0b:5f:7e:43:
e2:83:df:79:75:f2:42:f8:45:0d:80:61:56:87:0b:a8:58:07:
43:5a:be:b9:a2:34:b2:6f:6f:20:c2:f5:db:d2:0e:35:9d:ca:
24:c8:c5:0e:58:6c:ff:3a:d0:03:81:42:1a:42:82:e3:f9:7e:
a2:a1:ad:fd:0d:a4:a9:0b:e5:c5:06:ba:7a:8f:01:9f:02:f5:
52:be:32:fa:2d:7f:5b:e1:78:e9:aa:09:23:ad:91:20:90:9d:
a7:5e:9e:9d:a0:c2:4b:40:ba:0a:25:0f:88:47:40:00:52:40:
7a:1d:c2:d8:82:f9:da:b3:a3:f2:d4:73:c5:4c:dc:4b:74:df:
0b:b0:97:e7:73:89:12:59:f8:3e:bc:60:f8:73:bc:fc:a5:1f:
19:6b:21:79:8a:2e:de:0c:a0:73:3c:e4:8d:b0:ed:de:f2:e6:
f7:84:4f:22:a4:e5:89:42:65:8e:59:f5:63:82:ee:40:c1:01:
c2:9a:48:fb:3f:fa:29:33:aa:f7:7c:45:48:4f:68:d3:14:db:
7b:fc:62:49:1b:65:b9:f7:ac:6b:e0:a4:11:0e:ad:2c:25:d6:
64:54:1e:a6:24:22:b4:02:97:76:12:5a:78:03:31:1b:d7:a0:
92:67:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:52:40 2025 by rpki-client