Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d804babf-7464-3dce-b9e6-f86a86d3c360.roa
File: d804babf-7464-3dce-b9e6-f86a86d3c360.roa (raw, json)
Hash identifier: 4eh2sKUxdHBmKYeUGx3r6ivIsCOVTuL66BLwGO50MuA=
Subject key identifier: F9:66:98:C5:A1:3C:53:A7:CA:C6:E3:38:C9:4A:9D:CF:AD:4F:3B:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA586F90D7FC8B95FCA48AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d804babf-7464-3dce-b9e6-f86a86d3c360.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:58:6f:90:d7:fc:8b:95:fc:a4:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=3e78f396-ee81-4e21-9275-1f6f7a5367e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:54:40:0b:dd:64:88:79:63:c2:d4:1a:bb:
d5:97:bc:fd:7e:a1:76:8b:7a:74:ee:d1:ff:27:eb:
6a:d9:91:d6:20:3e:08:e6:1e:1b:51:6d:b0:d4:f4:
99:00:70:95:38:62:24:6f:f4:c5:76:1a:33:66:cf:
04:a4:78:37:cc:a4:53:93:fd:c8:28:7f:a0:0d:dc:
d1:8e:cd:c1:f0:44:07:1a:19:ca:bf:80:22:6c:76:
f2:f6:34:dc:24:dc:6c:3c:fb:9c:6a:93:2b:18:e0:
e4:23:55:99:8f:a5:12:33:3b:b7:a1:50:f2:01:55:
02:27:f0:ce:87:10:9b:ca:38:c5:5d:ba:53:82:37:
ee:57:ae:05:a8:81:0b:d9:2b:5e:49:08:94:9f:55:
c1:0f:85:ec:a2:38:cb:0d:b4:9f:51:f3:54:ce:af:
d7:1f:73:ae:21:6c:8c:e1:00:39:84:75:12:b0:b8:
8b:47:e7:37:52:3d:6c:86:d2:1a:5f:74:8c:65:2c:
6e:9e:9a:11:24:54:5e:a6:3f:0f:70:51:04:d2:3c:
4f:94:37:6b:e5:3c:43:3f:45:2a:95:d2:0e:d1:35:
a7:6c:4a:3d:13:34:c7:7d:08:18:56:53:ce:c5:2c:
d8:ca:39:69:14:fe:d8:95:b6:67:a8:1a:6d:1c:90:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:98:C5:A1:3C:53:A7:CA:C6:E3:38:C9:4A:9D:CF:AD:4F:3B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d804babf-7464-3dce-b9e6-f86a86d3c360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:3a:c0:7a:b5:92:e1:f0:df:47:17:46:23:11:9e:4e:22:97:
a7:46:59:2a:47:c9:1a:7d:c5:f3:63:aa:e7:5c:08:96:7b:2e:
a2:64:0c:b8:40:82:b4:67:2b:91:b1:a8:a7:b0:db:06:af:8c:
41:ad:85:93:6c:07:7a:15:30:09:cf:33:54:c0:0e:30:57:dc:
f1:43:b5:64:c3:2d:03:e2:ae:ab:ae:59:ad:c6:99:12:ad:57:
18:1b:86:3e:10:77:97:20:f2:0c:fa:43:a7:6c:76:68:9f:be:
34:d8:44:ac:c4:e6:28:99:11:28:d4:c6:a2:c3:61:17:ff:04:
fc:e1:87:0d:dd:b2:0e:b9:00:61:3d:6b:aa:05:a1:9a:58:42:
52:f5:be:6b:06:2b:a8:98:89:08:02:e2:e2:15:57:c6:2b:e2:
9d:ca:04:94:e6:f4:b4:21:df:f6:e0:bd:8d:aa:2e:42:2b:4f:
fa:00:61:85:fe:38:69:96:d3:eb:a6:01:6e:ec:18:52:6a:cd:
a3:48:3f:ea:b3:33:92:ef:0b:0b:4c:6d:91:33:fd:4b:db:ea:
af:f7:95:3f:2a:52:db:6e:9a:1e:b7:6e:50:e0:b5:ed:b3:bf:
e6:a8:ce:7e:e7:5b:a2:43:74:91:dc:40:dd:8b:6c:07:a2:dd:
a1:10:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:23 2025 by rpki-client