Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d31d106b-70a6-3a91-bbc9-3c616977fd4b.roa
File: d31d106b-70a6-3a91-bbc9-3c616977fd4b.roa (raw, json)
Hash identifier: sa8J8t5C1cS0Rvj9JS99Yx1yt+uoa34rZj0rxGxCVz8=
Subject key identifier: AA:13:D6:39:0D:FF:D7:82:F8:60:AA:FD:B9:24:3D:B7:7C:92:4A:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840433151CBADB1D81FA6F2B700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d31d106b-70a6-3a91-bbc9-3c616977fd4b.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:31:51:cb:ad:b1:d8:1f:a6:f2:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=e3342b73-01ab-4d57-bebe-3b2078b1c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:9c:b2:3d:5a:3d:31:1e:8d:cf:e6:20:6f:
38:bd:10:d1:c2:56:3b:f6:fc:cd:30:11:0c:86:8b:
f0:78:57:36:d3:14:67:65:6a:d2:71:a4:ad:c1:ca:
9e:d8:ce:8f:a5:91:ad:b4:1e:5e:55:bc:90:88:23:
31:99:fc:d5:b1:79:64:6d:9b:ba:31:7d:82:91:b7:
76:c9:3e:bd:57:ff:80:bf:b3:e5:53:02:50:cb:bc:
5a:cb:cb:5f:7f:77:1a:f3:f6:d8:7c:04:94:63:58:
7a:24:87:78:c0:e8:d9:ed:97:39:25:18:83:f3:fa:
6e:4f:d4:3e:07:87:61:46:e2:62:ff:7c:73:d9:a5:
5e:7b:95:40:69:e8:cc:1e:f2:06:ad:7b:99:57:e6:
a9:ca:0f:d5:b8:d1:6a:18:5d:26:f7:0c:d9:4e:bc:
13:d1:72:0c:61:01:26:44:9d:f3:db:57:e6:bb:15:
fa:a6:53:e9:fd:73:69:ca:a6:d5:41:45:16:b5:ed:
a4:bf:2d:22:be:f7:45:1e:c4:08:91:a1:f5:da:d5:
49:3f:6a:ac:9c:ad:e5:82:82:d9:64:4f:ea:b4:30:
c3:9c:7a:20:cd:77:35:fc:1a:1b:d5:3f:32:2d:47:
64:6d:36:06:b6:5d:67:37:26:f8:bd:3f:39:a1:38:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:13:D6:39:0D:FF:D7:82:F8:60:AA:FD:B9:24:3D:B7:7C:92:4A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d31d106b-70a6-3a91-bbc9-3c616977fd4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.172.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:3b:ab:75:3a:ee:21:aa:5a:b6:65:78:d9:07:2f:fd:ac:2d:
6b:d0:ba:95:63:d0:e4:95:83:d5:e7:09:c1:a0:cd:a7:aa:57:
f0:19:8c:eb:7b:cf:d6:bb:30:d8:72:b7:80:40:c1:ec:ba:5b:
c3:8d:2e:1a:37:c0:79:fc:87:b2:02:a8:0c:ae:64:87:47:3a:
b7:c2:a2:66:0f:b4:71:a2:1d:25:c0:c3:9b:0c:30:34:30:cb:
4d:04:24:51:c8:75:04:a3:8b:4e:99:79:2d:b9:9f:ff:44:e2:
d9:70:96:56:b7:90:a4:ba:2c:e4:e4:21:fc:39:b1:05:e2:78:
e4:60:05:04:9f:69:41:57:aa:1f:bf:3f:d3:e6:dc:0f:29:5c:
82:d3:33:9b:9a:b8:44:f0:66:b3:a7:f9:ba:20:b1:d0:7b:79:
5e:80:96:d4:7f:df:61:04:a3:11:32:5f:f4:ac:50:1c:a5:f0:
20:4d:d6:93:dd:7a:a9:73:96:76:51:14:1c:a9:cf:05:67:9a:
06:73:71:ac:2c:19:a0:63:a4:48:26:a8:e9:80:d4:0e:83:47:
bc:4e:aa:b0:ae:c0:e5:e4:7d:97:79:91:7c:db:1f:c3:1b:06:
4e:8b:83:7b:5b:ca:2a:6c:a6:e0:a9:ff:26:90:92:8f:1d:37:
cc:c2:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:32 2025 by rpki-client