Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d141d7fb-a6a4-3122-9374-de08553def49.roa
File: d141d7fb-a6a4-3122-9374-de08553def49.roa (raw, json)
Hash identifier: mDHo93/6vcJXIv0MXAG4PPlUkQDnOvXIADkcTDvmrMQ=
Subject key identifier: 88:AD:89:B9:35:41:67:55:AF:E0:7E:0C:11:85:29:07:19:51:4B:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584041906F258D29DFDEDDEEB980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d141d7fb-a6a4-3122-9374-de08553def49.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:90:6f:25:8d:29:df:de:dd:ee:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=c4fe07c0-de3d-4b64-8621-9dcbf948a949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:07:a8:34:bd:dd:d5:e7:ca:21:69:c8:93:
e5:95:b2:27:5d:af:ae:2f:c5:89:5f:e9:c4:f3:4c:
10:4b:b1:7a:b7:22:5b:61:f6:b6:52:f1:5a:1c:05:
56:96:bd:d3:74:5a:2d:36:19:47:34:cf:ce:bc:e6:
11:28:a8:df:eb:45:b7:ed:8d:a0:58:f5:30:40:49:
9a:18:b4:a3:88:c6:c7:f4:3f:c7:5a:89:dc:41:c8:
89:74:77:ca:3c:52:fb:e2:13:92:96:44:93:35:58:
97:ec:09:e7:48:28:f0:dd:17:83:60:db:2e:1b:0e:
6e:1c:67:d8:9e:ab:10:ab:70:8f:dd:20:14:10:12:
51:b4:1d:a0:1d:bf:c6:99:a5:1a:3f:6c:27:f7:4a:
11:7c:36:01:06:94:80:ed:6d:f1:10:e8:ef:32:09:
6e:c7:2a:0f:9d:15:80:93:6f:a4:d8:4b:78:2e:1c:
b3:72:17:c8:b1:ca:8b:c3:82:bc:38:da:4b:17:34:
11:b3:ad:9f:5a:9d:bd:cf:3a:7a:8d:78:e9:46:cc:
76:1d:64:e3:c2:bb:9a:c8:60:31:0f:52:20:51:15:
e8:a6:be:40:88:18:32:27:d2:e1:44:f9:2e:3e:67:
f1:d8:98:3f:a3:6e:8a:a8:65:d1:4b:76:41:54:c4:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AD:89:B9:35:41:67:55:AF:E0:7E:0C:11:85:29:07:19:51:4B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d141d7fb-a6a4-3122-9374-de08553def49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:28:f3:25:df:f1:e2:e9:3c:ec:bf:5e:ce:ec:b6:59:e2:48:
91:53:56:f7:1a:2f:12:4e:8c:7f:0d:08:f9:27:a7:73:00:e8:
c4:51:f1:36:67:06:43:ad:c3:b5:07:86:eb:4b:3d:a1:82:11:
73:d8:4b:dd:af:fe:e9:3b:2e:74:52:11:ef:b8:75:21:eb:71:
62:20:84:99:13:db:d2:4d:30:fe:c8:f7:81:93:80:22:05:35:
5e:61:ca:d0:17:c8:28:bd:be:6e:0e:d3:7b:bd:17:68:20:46:
ca:69:eb:4d:4f:85:3a:91:cd:b1:f4:c0:ec:4a:b2:86:ea:4a:
4a:3c:b2:87:40:40:5e:b9:af:86:d2:83:02:ea:55:4a:8b:82:
69:a7:6d:14:f4:98:53:1d:b9:96:14:70:fa:6c:57:64:0a:ef:
27:07:d6:d1:23:21:d9:9e:2a:c4:0d:6e:2f:39:b7:35:7f:16:
a2:b4:b9:06:07:a0:43:64:2c:5b:6b:7b:91:4e:5c:9b:3c:92:
6d:bd:12:48:2e:07:32:f8:2c:c6:92:40:0e:41:61:30:f5:aa:
9f:6d:7b:9a:a0:8f:40:b0:7f:5a:4b:f1:dd:43:30:32:a7:e9:
f4:b8:ac:b9:16:3e:f9:0f:00:ef:d2:06:98:2c:f7:af:d1:77:
82:7a:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:43 2025 by rpki-client