Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d245f209-8e03-3050-a9e2-9f4fd5846e67.roa
File: d245f209-8e03-3050-a9e2-9f4fd5846e67.roa (raw, json)
Hash identifier: Ov95CExycxZojPuGYxz+yUUqsO6MF56SWX5C6WWgZBU=
Subject key identifier: DC:D8:F0:EF:0C:F9:4C:44:A5:3C:3A:25:51:E6:BB:0C:71:F9:1C:E2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6F8D5A586F4AE807F896280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d245f209-8e03-3050-a9e2-9f4fd5846e67.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:f8:d5:a5:86:f4:ae:80:7f:89:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=774a6579-50b6-4740-b5d0-9d4ae36ca3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:ae:cf:74:98:15:36:c4:47:63:61:e3:40:
7a:41:68:77:d3:bb:5e:b7:59:0a:03:83:0f:84:ab:
66:af:04:bf:2a:ab:08:99:32:74:5d:bb:4c:be:e4:
1f:f6:df:72:69:55:77:0b:79:1f:b2:82:3d:90:fe:
85:72:5d:84:41:20:a8:c1:52:5c:32:10:ff:72:af:
5d:40:1d:b9:32:0a:6e:fb:57:86:69:b9:8d:28:76:
1a:c1:2e:42:2a:dc:43:18:6e:2e:ce:36:d8:3a:ea:
e5:ed:45:7e:8e:b4:6f:4e:6b:94:33:94:8d:f6:d7:
0a:33:be:b0:05:8a:6e:fb:91:1c:5a:19:fe:76:ad:
ef:2d:f3:44:bb:f7:c4:b9:d4:62:fd:8c:10:52:b6:
74:9f:6e:bf:ac:48:ff:f7:d8:f6:fc:83:60:c9:32:
cc:5f:ea:af:77:31:ca:eb:3b:cb:55:5e:10:62:d2:
09:26:4e:d9:c5:0e:e8:9d:cd:38:ea:7b:36:f2:73:
a5:25:3f:8d:84:ab:d3:b1:68:8a:17:39:16:06:a2:
de:d0:fa:08:3d:fe:51:67:86:ee:f1:fa:11:0a:b1:
2d:3a:a9:2b:67:3d:24:bd:2a:66:b2:16:98:77:04:
2e:eb:c1:28:12:1d:43:b3:d8:fb:6a:82:e6:d8:df:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D8:F0:EF:0C:F9:4C:44:A5:3C:3A:25:51:E6:BB:0C:71:F9:1C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d245f209-8e03-3050-a9e2-9f4fd5846e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:04:85:3a:da:b7:c9:0c:eb:5f:bf:28:ab:c4:ab:67:4e:82:
b7:fa:67:3f:80:53:03:bb:cc:f0:ff:1b:e9:02:26:1c:da:3e:
7b:f5:e1:a4:01:0f:8a:f0:6a:82:fe:48:e7:3d:fe:08:eb:5d:
1e:48:48:0f:e9:61:68:48:68:e4:4f:b3:84:3f:5c:d0:6a:6e:
9f:b4:28:1d:ff:cb:8d:a9:7d:f5:06:fe:d5:32:fa:95:b3:20:
66:c9:66:c5:74:94:d3:3e:3f:b7:57:7c:0f:01:c3:4f:49:46:
8a:73:5c:0d:71:aa:8a:fc:af:80:46:b2:99:cb:86:d2:40:47:
6b:0f:8d:1a:ed:f5:fc:4a:32:57:0d:5e:01:fb:42:d3:bb:00:
bb:97:fb:34:48:e2:0e:c7:10:5d:af:f3:62:43:13:46:80:b6:
8d:8d:f3:91:e4:de:e8:00:0e:0a:b0:58:7d:0c:47:18:f8:58:
31:29:3b:1e:a3:2a:9a:a9:ee:6f:44:a4:83:1f:08:b6:64:5d:
57:59:47:13:91:38:ab:c5:67:30:59:5d:c7:0c:a1:dd:0b:04:
82:82:8b:e5:a2:7c:e4:2e:28:9f:cd:fe:ee:31:26:7f:15:7c:
1b:17:e4:5d:49:31:46:dd:85:4c:68:a8:79:a0:e9:7b:ad:28:
06:c5:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:59 2025 by rpki-client