Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0604f8-9a87-3682-b64b-5e5f34a26ee0.roa
File: ce0604f8-9a87-3682-b64b-5e5f34a26ee0.roa (raw, json)
Hash identifier: ArjvOWTilWVWWGVstxzl2GGCLZ4rCbZBmGPL/eUIWJ0=
Subject key identifier: 37:99:73:E4:47:6A:1F:0D:B1:67:D8:DA:51:B2:7B:4A:8F:39:49:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCFA7B2AE0D98A057306D7200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0604f8-9a87-3682-b64b-5e5f34a26ee0.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:a7:b2:ae:0d:98:a0:57:30:6d:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=d92fb684-b6e7-4f57-9eb3-ea9c88879e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:ad:5f:a6:ea:9d:4c:89:db:6b:31:c9:4a:
17:01:16:e8:7a:a2:e6:28:11:ec:bf:d0:ae:ca:f7:
00:10:a2:15:8f:cf:c4:3b:23:fa:d4:d1:b7:33:1e:
a8:0a:0b:c6:68:db:10:46:91:db:8c:5c:cf:a3:94:
ff:71:33:31:40:f0:1c:78:54:ea:09:1e:b9:a9:8b:
3b:e6:91:32:5d:51:e6:1b:4b:67:6a:8d:60:84:6b:
b3:79:7d:1c:21:e6:41:41:06:4c:5c:af:79:cf:67:
3d:13:69:53:3a:b9:ff:2c:ff:24:79:38:bb:78:4e:
4b:b4:d4:7b:f4:3e:ed:42:b2:fb:48:18:36:d7:8e:
46:43:4a:f7:56:89:fc:b0:a0:68:ca:1e:19:94:07:
e7:48:a5:24:93:4e:5a:74:83:17:12:e0:31:2b:d0:
5e:34:8d:4f:21:54:39:84:69:eb:cb:2f:76:e4:9a:
20:6b:ae:66:35:59:9d:d1:5f:4f:55:c0:88:4b:b0:
f9:a8:6a:d5:94:60:13:33:c0:12:8f:1f:23:a1:8b:
4f:3f:b4:4b:32:2f:2b:14:81:6a:34:20:ea:d6:b8:
5e:f0:67:51:ad:58:b3:04:dc:71:a2:e2:9f:b1:b4:
5a:2f:9b:d5:b8:ba:b2:ec:42:c1:8a:1f:01:eb:47:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:73:E4:47:6A:1F:0D:B1:67:D8:DA:51:B2:7B:4A:8F:39:49:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0604f8-9a87-3682-b64b-5e5f34a26ee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:5c:be:2a:b3:eb:9e:2e:9e:d9:ac:37:61:46:17:f6:30:4c:
9e:b4:44:65:c4:8b:3f:7f:5d:ad:63:b6:5f:2a:9b:7d:f5:75:
25:de:46:80:f1:80:26:26:f0:a1:ad:a1:ff:20:c9:9d:ea:c7:
72:ad:c2:f5:08:59:84:0f:44:86:38:bd:10:ea:39:22:be:ef:
29:73:f1:6e:db:e1:57:28:ad:ca:cd:c8:34:1b:8b:4b:81:b9:
e2:b6:6e:99:85:19:72:1f:c2:2b:30:2f:e1:94:17:ca:25:66:
00:ed:87:65:77:aa:92:df:00:40:d8:26:4f:04:60:63:81:66:
bc:fb:48:6f:d1:d3:9b:3b:ae:34:34:95:4c:0b:94:57:9a:de:
ff:05:0b:b6:a7:ad:c5:7a:93:6a:c2:e8:3c:42:88:47:34:ae:
92:f0:3d:ac:1d:65:90:be:8c:da:a8:2f:f4:82:f4:5a:49:f6:
60:6f:98:63:19:ee:48:5b:93:14:c5:dd:62:45:9a:d0:6e:9c:
52:dc:63:7b:a3:46:77:82:a2:9f:30:31:f3:30:b9:6a:46:9a:
58:18:de:df:71:d9:ee:e1:4b:08:be:41:e1:8d:f9:f1:fa:bc:
51:64:5e:9c:7f:26:e8:1a:84:11:69:20:00:18:94:03:fb:27:
41:46:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:28 2025 by rpki-client