Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cceca020-e294-3366-a3eb-ffb7b64824b6.roa
File: cceca020-e294-3366-a3eb-ffb7b64824b6.roa (raw, json)
Hash identifier: /xqP9ItaALjmit9FsdUwPlJ3N71HGZUwG9oeYb8g3Rs=
Subject key identifier: 57:F1:DF:FB:26:08:52:6C:B9:8C:E6:D5:13:1D:AC:EB:E2:01:98:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7B33580197C6F2DB6D93F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cceca020-e294-3366-a3eb-ffb7b64824b6.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:b3:35:80:19:7c:6f:2d:b6:d9:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=2afb3e44-4e25-4aa7-861b-94aa43fd2c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:0b:9b:d5:82:22:0d:8f:07:8f:68:bf:dd:
1c:ad:1b:37:b6:96:42:03:61:51:04:d5:d5:1d:7e:
92:dc:5e:9c:41:d8:f1:4b:f5:27:de:ff:a1:aa:61:
53:83:31:46:38:dc:8d:d8:53:1c:be:a8:a5:35:2a:
4e:bd:80:fa:1f:99:72:cc:e0:c7:20:2f:69:60:12:
d4:ff:f8:d8:8c:b0:68:7b:2b:85:3d:ed:b7:86:a6:
d6:de:c1:d0:ac:8f:80:98:1c:39:04:71:c0:6a:f8:
93:c0:5d:92:31:79:11:ea:a0:20:1f:9a:68:73:ee:
12:68:9a:87:79:3b:02:08:33:e5:06:10:9f:51:5e:
95:50:6b:49:d6:63:f5:e8:d9:59:08:20:b1:61:e3:
7d:c3:4c:56:64:ea:64:20:ca:e1:34:de:28:79:12:
e6:b3:05:89:ff:1e:1b:88:c3:f8:19:b8:2a:41:6a:
71:89:8a:df:d3:d5:9b:53:80:dc:e3:48:d7:86:0b:
ad:43:c3:82:83:4b:86:ba:db:f5:23:1f:e0:f9:16:
79:ee:c1:0a:38:33:2d:fd:46:74:a8:b2:2f:5a:be:
ab:94:7c:35:c6:6e:25:2b:f8:42:02:65:81:9c:48:
9f:56:75:2a:00:8c:29:86:52:cc:3d:22:0e:66:a8:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:DF:FB:26:08:52:6C:B9:8C:E6:D5:13:1D:AC:EB:E2:01:98:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cceca020-e294-3366-a3eb-ffb7b64824b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:62:5e:70:3f:fd:7f:89:b6:6d:e6:f1:ed:6a:8a:c7:70:86:
f8:d5:46:ea:38:14:39:0f:be:9b:54:94:51:35:c2:54:dd:06:
95:09:4b:5e:88:79:cd:00:46:54:f5:46:e6:41:c9:c7:92:2c:
03:98:d0:4c:4f:7a:63:d5:58:69:2e:29:66:97:1d:ab:23:49:
ab:37:0e:67:85:52:5d:92:0e:02:f3:e0:df:a9:b4:b0:26:4b:
3b:57:bb:7a:bb:34:25:ee:fb:f2:41:2f:a3:bf:a3:dc:de:11:
88:50:6c:71:ca:81:1c:3a:60:fc:13:2b:fd:d5:58:c2:e1:d8:
08:13:30:97:fa:1d:f2:f5:d3:c4:75:8d:bc:41:2b:91:89:38:
58:51:1e:cd:1a:d5:13:87:f5:db:25:7c:b2:82:ce:a3:db:50:
7d:83:f9:2d:14:6c:39:bf:75:15:5a:e0:ba:ef:cf:5c:ca:0f:
da:bb:f1:a0:7f:76:63:23:69:9a:4c:f0:24:64:0a:e3:fa:6f:
62:86:46:48:df:a5:e2:2e:12:c3:70:6a:9e:52:b9:1c:56:34:
db:b6:b1:83:b5:41:ab:3b:df:eb:79:9b:3c:39:81:30:38:fd:
89:3b:e2:ec:0f:20:b9:60:46:26:92:8a:21:a9:15:ce:21:15:
8d:ab:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:10 2025 by rpki-client