Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4132f91-7c14-3c10-b32c-057901c591e8.roa
File: d4132f91-7c14-3c10-b32c-057901c591e8.roa (raw, json)
Hash identifier: OhO1uyWtSErQLDlTIuLJ4agKYqWKZHvFEzaMx+e+zBw=
Subject key identifier: D3:97:56:D8:66:89:B2:CF:22:F9:7A:CB:78:89:00:4C:56:FC:26:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA5B138EE245BFB869574D0F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4132f91-7c14-3c10-b32c-057901c591e8.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:b1:38:ee:24:5b:fb:86:95:74:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=e5b1c51f-d440-46ed-ace7-c80f0878ea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:b6:ae:03:0f:a7:a4:96:08:c3:82:e4:f8:
da:ec:13:b6:b0:1c:4f:28:0e:66:73:f8:ad:14:4a:
98:47:21:91:2d:e4:af:d1:a7:65:0e:e3:08:5f:d2:
98:49:52:73:3b:8b:62:15:f9:69:34:86:62:2b:9f:
9d:bd:74:6b:26:db:c8:b2:8d:51:ef:24:8b:db:a4:
de:b8:ac:5b:0f:54:83:83:c6:90:12:10:a9:61:1d:
e1:26:5e:9d:db:d4:84:0f:09:84:4f:4a:3b:37:3d:
36:68:bb:a8:4c:e1:e5:5c:89:24:9a:89:b0:f0:49:
98:e1:5c:61:a4:5d:00:53:4a:29:19:b1:54:88:28:
a0:42:88:57:a5:9b:59:07:41:4d:e7:09:a0:d9:21:
b8:2c:3b:c1:30:56:31:d6:8b:0e:ff:92:d8:43:62:
69:e3:64:48:56:dc:12:23:6b:61:a2:ab:49:58:6b:
63:aa:f2:71:40:3f:ec:b3:39:e1:1c:0d:59:73:ec:
e1:76:bb:24:9e:68:aa:f4:a3:cd:3d:a8:c4:9d:41:
fe:a8:4f:70:cd:7d:48:85:bd:28:f2:57:2a:38:8d:
9d:7a:77:81:77:c5:c0:f6:eb:d3:6f:c7:69:1a:91:
9d:e0:ad:fd:be:6f:e3:4f:fb:89:cf:56:ac:f6:b2:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:56:D8:66:89:B2:CF:22:F9:7A:CB:78:89:00:4C:56:FC:26:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4132f91-7c14-3c10-b32c-057901c591e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:56:c1:8f:f3:4a:13:ab:a7:5a:90:d5:59:c5:47:d0:b0:b1:
c6:85:12:ab:27:e4:e2:3f:c9:15:a7:26:3e:4e:a7:40:d1:0f:
bd:f6:0a:24:f2:27:0e:4f:2d:de:0a:24:eb:f5:8f:8a:0d:7d:
07:5f:36:fb:b2:cb:76:f5:64:7e:7f:09:38:9e:70:f4:50:71:
a9:19:0d:d4:31:49:d0:9c:1d:c2:ae:e7:b9:cd:e7:f6:10:f3:
9c:23:e2:63:21:64:f5:38:82:bc:b4:41:31:8d:01:54:96:e5:
08:61:f2:39:cd:27:c9:e5:3d:ff:ea:82:2b:91:80:a3:79:ea:
d3:97:5c:38:0b:ce:b0:b1:4c:5b:75:e5:a8:be:b6:09:87:98:
b4:96:58:5d:83:18:fe:01:11:b4:8e:ec:09:74:7c:fc:bb:22:
c0:f6:00:b4:03:44:d9:73:cf:d3:11:43:b4:a0:04:1c:67:a2:
fc:06:22:a1:a9:82:fb:29:69:5c:60:4b:be:f4:02:73:d5:58:
e1:b0:ff:4f:c0:ea:64:2a:83:44:2d:3a:20:9d:16:98:3b:6a:
51:21:de:32:c7:8e:c5:ad:0b:92:f4:90:27:2f:5e:7d:eb:02:
c8:91:9b:93:db:29:dc:27:8d:3f:3d:20:3d:b0:56:00:6b:2e:
9c:f2:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:13 2025 by rpki-client