Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccf7030d-8b7e-365f-9787-54c5e06f2b56.roa
File: ccf7030d-8b7e-365f-9787-54c5e06f2b56.roa (raw, json)
Hash identifier: VUAmxFth3G0hgJyvqGmLR1Z3dBmR/95i2dwZ0kNcigA=
Subject key identifier: 0A:E6:6F:6A:23:D7:6A:60:26:16:FE:CA:13:BE:68:8F:14:A1:F7:8F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF84F4C656D501FDB3BA68600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccf7030d-8b7e-365f-9787-54c5e06f2b56.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:4f:4c:65:6d:50:1f:db:3b:a6:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=46fd56f7-0e96-4dfe-b891-08b5311bd838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:31:f5:f2:0d:93:3e:f0:09:9f:98:9b:4a:
83:87:f7:25:d7:2d:9c:9e:27:84:62:9d:09:13:6f:
03:a5:40:98:c4:18:41:6c:f3:70:a0:20:37:c6:ea:
37:95:4e:61:98:9d:f1:2e:d2:b9:85:63:a9:fb:25:
22:f6:73:09:bf:bb:3a:8d:31:f8:d7:5f:6b:e2:73:
ed:ce:e7:03:58:2c:a0:8a:c3:cb:f1:47:5d:13:d5:
ca:70:55:8c:b0:74:55:82:5d:56:aa:e8:33:bd:de:
c2:97:be:e0:b4:f7:83:f1:78:29:07:2d:3e:c9:08:
25:75:5d:f1:8f:34:af:c2:65:a6:6c:09:71:30:0f:
06:30:74:57:ac:42:96:96:07:17:e5:67:be:ba:69:
e0:ae:0f:d0:a4:3c:6e:bb:86:fd:6b:84:d3:6f:74:
9b:ba:5c:a7:3a:7e:0a:81:e4:ec:a6:ed:65:77:25:
4e:aa:c3:db:4e:80:e6:74:45:8f:a3:84:6e:9f:ab:
ba:3f:df:67:3f:96:4d:a8:7c:b7:9b:03:75:bd:ff:
f2:4d:a4:43:12:05:32:e3:20:e7:ba:69:25:95:aa:
87:dd:8c:ad:bb:90:97:51:be:b9:2f:21:68:50:38:
7c:87:47:e6:4c:18:5e:38:9c:7b:26:c1:d5:1c:c4:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E6:6F:6A:23:D7:6A:60:26:16:FE:CA:13:BE:68:8F:14:A1:F7:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccf7030d-8b7e-365f-9787-54c5e06f2b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:aa:1a:9e:cc:c5:25:90:7b:d1:36:18:db:ec:44:70:cd:f2:
2f:ea:37:5e:a8:ce:68:88:64:d6:cb:e2:47:6e:28:71:a7:ca:
15:6d:d9:24:41:1a:03:38:0f:72:ae:89:e1:e9:2c:34:7f:a3:
3d:42:54:e0:31:31:d3:5b:b0:71:ae:35:09:df:5e:c4:bd:20:
66:f7:09:35:c2:06:e3:f7:b3:12:c1:5f:d3:d6:af:b5:a3:ac:
ae:02:4d:1c:21:e7:dc:64:b2:42:93:e1:bc:6b:c0:f1:80:ca:
ae:88:f6:9b:4f:ca:11:64:6b:80:8c:07:82:46:04:24:b4:b3:
ca:d3:5c:bd:37:60:5a:58:ea:09:b9:c3:56:ca:c8:f0:b3:b5:
19:06:fd:4f:f4:b8:a6:8f:3e:3c:d2:51:09:a6:ff:8d:41:60:
f2:9d:02:92:54:ef:c9:d7:b3:c4:75:7b:77:d6:3f:34:34:b7:
a2:77:fe:7e:af:6b:22:29:f4:96:53:4e:29:a2:8e:10:9f:6e:
7e:dd:4c:9c:15:08:01:ef:ad:7d:f7:43:9a:70:1d:f5:fc:d7:
79:87:25:ab:52:d2:63:d8:80:b7:de:d2:e9:de:9b:3c:00:58:
6c:b4:d8:e0:99:ca:bf:ec:32:3f:7a:4b:c3:a0:ef:39:ec:b6:
a6:33:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:14 2025 by rpki-client