Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae08385-1b82-300c-96dc-a0b4de981a53.roa
File: cae08385-1b82-300c-96dc-a0b4de981a53.roa (raw, json)
Hash identifier: 5SE95oLdzsFjYxMNfducuy1XTkOw1uWaoVgLpuqJd68=
Subject key identifier: B3:12:B5:A9:14:AE:A8:CC:5A:77:81:39:B6:74:5D:DC:01:72:BE:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59658D4CEC88ABF079B7B120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae08385-1b82-300c-96dc-a0b4de981a53.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:65:8d:4c:ec:88:ab:f0:79:b7:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=9017fe3c-3b3a-4fad-80ff-95d2732f9a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:40:e2:92:14:6c:e7:0a:09:35:d5:76:d8:
a4:8d:9a:af:29:d0:cb:20:c9:6a:b1:eb:3c:e4:2a:
88:05:c6:dc:7c:06:1e:fc:e7:2b:bd:ff:ac:48:81:
34:6a:d0:ac:71:29:0a:09:f9:e5:dd:62:d5:85:22:
46:81:8f:89:2f:e9:3b:82:5c:ce:90:15:18:8b:7e:
a3:39:40:bf:c3:0a:ff:a1:21:89:f4:de:2d:4a:a6:
4a:44:dd:8d:b4:7e:b3:81:cb:88:43:f2:8f:d6:ec:
d4:7f:24:3c:58:29:5a:cd:72:9b:68:e4:64:10:e1:
89:e4:9c:a9:c4:ae:e7:0e:b9:c8:d7:99:3e:e1:52:
89:77:fe:88:b6:14:7b:25:94:55:37:2a:da:b5:ab:
88:aa:54:2f:62:77:07:d6:8d:f7:a3:b6:49:c5:37:
e9:50:e6:7f:fa:ba:49:ca:5b:60:af:0c:b8:3b:cd:
cc:1a:fc:3f:a0:45:03:b0:e1:f5:a8:93:8b:e0:06:
aa:2b:c6:2a:0c:91:13:7b:ab:d4:fb:f4:49:00:2f:
2d:de:b8:78:03:af:69:35:63:78:29:96:24:8e:7a:
c7:98:61:8d:70:29:fc:34:3a:11:9a:e9:f0:ef:a0:
58:29:32:96:32:01:15:89:a4:61:49:12:d8:57:e9:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:B5:A9:14:AE:A8:CC:5A:77:81:39:B6:74:5D:DC:01:72:BE:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae08385-1b82-300c-96dc-a0b4de981a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9b:fc:38:55:fd:c3:82:ec:89:52:07:0b:c1:73:81:65:df:
b5:e8:da:63:29:a4:82:72:b9:74:4a:81:61:2c:87:cc:6b:ff:
9b:bd:09:e1:c4:b9:cf:9b:22:e4:10:60:6f:13:90:36:85:92:
83:58:f9:a9:69:31:f5:2e:65:b5:8d:2e:6a:8b:30:18:e4:1a:
96:b5:70:40:e2:ab:d6:cd:98:59:6a:60:12:62:2b:6d:cc:15:
16:0b:1a:a3:9d:c4:15:ae:c0:68:18:c4:6c:14:05:cf:11:6c:
14:ce:6e:87:7e:5a:dc:ec:d6:34:f2:35:d2:32:f9:c8:10:a8:
8e:d4:b4:ca:34:92:3d:e2:90:05:84:43:fe:27:22:46:b1:6b:
db:d2:f0:50:82:06:60:81:ba:2a:28:e9:24:15:f1:55:1e:84:
16:3c:a7:f9:8c:c7:11:6e:60:7b:79:1e:c6:00:78:81:c1:39:
fc:e0:f7:2f:85:c1:5a:03:21:a6:90:6d:c1:a1:22:53:e4:f4:
a3:62:5d:c1:f3:81:10:d1:3d:29:3e:89:92:59:63:54:aa:13:
f1:02:2f:73:09:c4:e8:00:b7:14:63:37:72:9f:1d:a1:cb:a0:
0c:ac:d0:e9:de:d8:2f:4a:bf:78:07:72:3c:25:b1:92:b4:55:
ef:91:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:33:15 2025 by rpki-client