Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb402339-c429-300f-86fa-0f3b300c8729.roa
File: cb402339-c429-300f-86fa-0f3b300c8729.roa (raw, json)
Hash identifier: bC2VwgkNOjmK3CeVUzp6lDf7W5ywvhJjsbubUgriRdA=
Subject key identifier: F6:23:58:96:51:94:37:56:41:76:F8:1B:B2:19:E9:AF:9D:1B:B3:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584094096D8067A80566E2D12780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb402339-c429-300f-86fa-0f3b300c8729.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:09:6d:80:67:a8:05:66:e2:d1:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=1ea62844-666f-4750-81aa-7a96a2a2e01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:e4:3d:a7:3e:5e:9b:4f:77:1d:21:bb:44:
2b:7e:83:be:08:be:0a:af:4a:e8:15:0c:fd:38:8a:
ea:68:63:2c:5b:02:fb:19:23:75:bd:38:2c:28:52:
ea:b2:92:13:ab:61:ae:9f:71:f8:38:e1:0e:13:36:
88:77:3b:d0:92:94:32:c8:f1:2f:8d:85:ca:da:ff:
ab:97:95:d9:15:eb:50:3e:eb:ed:ae:07:b8:4d:f5:
a6:c6:d6:09:e1:16:0b:8c:23:d1:50:bb:49:c4:be:
d2:ee:50:ec:a8:ab:29:34:26:2a:3e:3d:90:b9:a2:
d9:86:53:d8:44:56:d9:11:76:34:59:e5:94:94:1a:
da:17:34:27:6f:8f:1b:ae:3e:f4:f2:fd:40:4a:12:
a6:0f:37:d1:c6:4a:fc:42:72:f4:9c:89:2b:cc:8b:
1e:6e:9f:ac:c1:f4:2d:0d:a2:66:ca:9d:6c:22:f7:
2c:9c:17:c6:20:83:13:05:3c:aa:b4:7e:ba:c1:5a:
ec:e3:20:f1:82:93:ff:5f:df:fc:3e:b9:cb:67:ac:
68:e5:fe:3c:90:9c:f6:9f:8b:fb:4f:f2:1f:9c:e6:
e5:d3:0a:5c:92:2d:b6:5a:ce:f8:b6:4e:b6:e7:2b:
4d:ad:97:46:df:10:78:23:ef:5b:e9:bc:06:59:47:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:58:96:51:94:37:56:41:76:F8:1B:B2:19:E9:AF:9D:1B:B3:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb402339-c429-300f-86fa-0f3b300c8729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0b:1e:00:00:b5:9e:da:fc:f2:70:97:53:b5:fd:a6:03:11:
dc:de:95:c9:b1:ca:f4:83:ab:7a:bf:9e:49:80:ae:73:10:70:
67:9d:b6:ee:8a:cc:e3:49:4b:cb:93:58:9d:dc:59:a5:fb:73:
e5:88:69:52:10:00:d9:a3:43:e1:18:08:6d:e8:91:0b:50:3a:
a6:35:19:d0:84:82:df:80:47:0f:fe:0e:f7:b4:1f:cc:9a:b0:
47:31:3f:93:41:22:48:0c:93:c3:c3:55:54:a4:aa:35:a7:49:
89:35:c8:86:ff:89:29:5a:b3:b8:1f:b1:bc:db:51:99:5c:24:
4e:44:e8:19:da:a8:ea:ec:88:31:df:b6:33:40:ff:33:42:45:
a9:a6:d2:73:2d:f9:fa:14:2c:41:4e:1e:34:f9:06:78:b7:8c:
f0:13:cb:cc:91:0e:86:3b:eb:e6:ec:7f:c4:b2:fd:86:43:7b:
23:98:4c:6a:d8:01:27:e7:1e:b3:65:b0:9d:1f:dc:cd:c4:59:
3d:2d:1b:ec:f3:d8:3d:fd:58:d8:a6:56:8a:cc:a2:05:c8:82:
ee:b3:8c:35:e5:f5:6c:53:3b:a2:f0:83:de:af:33:68:7a:e6:
db:fe:4f:cb:5c:90:9f:b6:66:9d:59:8e:5b:79:ef:ef:23:5d:
2e:f8:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:32:46 2025 by rpki-client