Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d542b49b-8037-37cb-9fb7-bcc33e0b5680.roa
File: d542b49b-8037-37cb-9fb7-bcc33e0b5680.roa (raw, json)
Hash identifier: VS6urpcraqQBETgk9PRljBj7reat1DQXDUdMkd/CiQY=
Subject key identifier: F5:07:50:0C:86:21:8C:8F:FF:22:75:32:82:43:59:BB:56:14:65:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5EF7128DAE324E53D660F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d542b49b-8037-37cb-9fb7-bcc33e0b5680.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:ef:71:28:da:e3:24:e5:3d:66:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=b26740be-3491-42ff-ba03-de4cd7cc9b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:5e:1f:6d:b8:c6:4c:54:cd:c6:41:85:bb:
07:d5:07:6c:04:22:21:d2:72:2b:a8:c8:5a:dd:13:
46:29:a5:8e:f4:08:b8:79:8c:76:5f:09:3c:9d:66:
6e:34:ef:b5:ae:4b:e6:05:61:b5:d9:70:37:0f:b0:
09:95:5b:f2:ea:96:bf:80:2c:b4:31:27:e5:be:da:
44:23:c3:8d:82:98:b6:83:79:ba:26:f9:09:9e:0c:
cf:6a:df:07:57:95:8f:23:95:ed:d4:bb:d2:42:98:
ce:20:9f:59:e2:cc:c8:cd:40:09:1f:ba:83:8c:ff:
cb:42:a9:3a:48:77:60:00:08:33:06:06:49:59:08:
36:b5:80:e9:80:df:99:1b:34:8c:d8:e1:11:bc:08:
1a:0f:49:e2:7b:5e:f5:a8:e4:a1:f7:46:b0:d6:95:
dd:c4:b8:0c:a7:8e:77:88:b4:22:e8:df:29:6f:43:
7a:c7:17:03:5d:38:55:55:ef:d7:87:ea:75:e0:c3:
73:db:10:db:4f:ee:fc:5a:70:a8:19:5a:6c:59:93:
27:0b:41:a3:f8:ae:07:ab:dc:a5:11:a5:87:45:34:
6a:2e:5a:bf:12:9d:7e:a2:90:31:88:27:94:34:4c:
81:02:10:e3:4f:88:05:a4:ab:1f:fb:d3:3f:a8:32:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:50:0C:86:21:8C:8F:FF:22:75:32:82:43:59:BB:56:14:65:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d542b49b-8037-37cb-9fb7-bcc33e0b5680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:c9:be:21:c8:3c:5a:00:ef:89:c7:81:af:c5:5f:5c:e2:08:
47:47:1b:a9:d6:18:47:3d:23:07:f9:5e:67:2c:a3:63:6d:fa:
86:9b:de:71:ce:b5:be:70:63:c7:76:f5:51:30:a6:39:a7:77:
c9:db:e9:2a:ac:d3:85:30:74:1c:c2:09:d3:9a:2a:a9:88:20:
41:1d:8e:cf:c3:15:dd:63:8f:54:40:f5:91:f1:36:4f:f6:cd:
36:9d:ea:3d:67:d5:d4:f2:9d:31:00:5e:aa:63:ad:92:9c:d9:
fa:6b:4e:6f:1e:46:d7:8d:1c:b5:b2:82:5a:b0:e0:7f:b7:ba:
75:28:87:c4:69:43:f2:38:d5:83:f7:95:76:74:41:18:e5:fa:
8e:b3:66:8e:8a:d7:27:2f:a1:ce:48:7a:a5:17:c9:e7:18:75:
cf:8d:66:f0:ad:3c:fd:17:df:e8:5c:7c:9f:03:dc:0d:a0:a7:
be:a6:85:41:5c:79:ac:38:bf:07:5a:cc:f3:98:b5:de:30:ce:
27:62:41:f2:2a:a8:10:7b:69:39:2e:31:da:da:b2:80:85:35:
3f:f1:bb:de:ec:27:63:b8:4b:60:b0:7c:9a:6d:ae:72:1a:68:
3a:03:bb:55:92:41:65:e5:04:fd:99:3d:11:ee:0c:8f:5f:74:
27:53:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:46 2025 by rpki-client