Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da2cc77d-c355-3985-85b1-1e59880c65f4.roa
File: da2cc77d-c355-3985-85b1-1e59880c65f4.roa (raw, json)
Hash identifier: jBrZGSIeMt+fBv0BCYxXPUTP3Ha40AzxSUgaLPfpOpc=
Subject key identifier: EC:36:3E:31:60:42:56:8D:A3:D5:12:FB:25:75:28:C5:06:64:8D:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3AF6B3892C7BE0DC9182820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da2cc77d-c355-3985-85b1-1e59880c65f4.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:af:6b:38:92:c7:be:0d:c9:18:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=ac84a8a3-c73f-479b-83aa-856dc78e13fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:a4:60:55:01:80:02:6a:d6:ee:24:b5:b5:
6b:64:7e:d9:6a:08:b9:c4:25:52:66:83:7c:cc:ce:
34:83:d5:ab:f0:aa:ca:a3:01:e8:3b:39:01:9f:69:
c4:2b:e8:e1:c5:d0:82:0d:63:d8:cb:61:ba:e4:53:
0d:e1:85:70:5e:86:80:2d:f0:9f:f0:37:77:0c:cb:
da:b9:f1:62:94:1e:c1:fd:95:e1:ad:74:5f:bb:17:
a9:0d:96:c0:ce:a2:6d:b7:9a:42:39:8d:ef:d1:26:
e3:86:79:1d:6c:40:31:7b:7c:4e:0f:85:1d:db:0a:
f6:ab:ea:5e:6b:54:ee:ca:70:68:e2:e5:6c:67:88:
b6:ca:6f:24:c6:70:1a:fd:34:14:2a:09:45:7b:35:
f2:a3:12:15:4a:fb:c9:bb:ba:d7:ca:41:d2:1a:82:
e9:1d:c9:8d:3b:c5:21:cf:a2:27:60:62:88:64:73:
42:c0:b8:00:34:af:cb:9f:fe:e8:3d:a4:70:6c:b2:
61:df:67:c4:c7:49:24:87:dd:5d:14:ea:ae:ae:79:
f8:fe:c0:e1:03:62:19:73:03:20:c3:77:86:d3:ea:
44:b5:0c:af:74:97:b5:ca:15:63:24:e2:aa:64:df:
ec:17:f4:f3:b5:12:a2:9e:ca:b7:3c:75:4c:ce:63:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:3E:31:60:42:56:8D:A3:D5:12:FB:25:75:28:C5:06:64:8D:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da2cc77d-c355-3985-85b1-1e59880c65f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:b3:a5:27:3b:28:52:bb:03:4d:1c:57:3e:0f:e3:ad:b4:17:
2a:cb:e1:0e:9d:8d:67:a4:bc:ec:ae:b3:35:73:45:46:86:4a:
cb:ad:85:de:50:0b:c7:42:ba:16:a0:9f:48:52:31:b3:e1:90:
07:bd:14:10:81:43:15:87:10:24:86:d8:ac:3d:16:38:4e:18:
90:89:ff:c7:c9:60:bb:a7:1f:38:07:b9:74:0e:21:47:12:d2:
3d:e6:9f:3a:67:11:04:3a:b7:3c:93:8a:e2:cc:d8:e9:93:67:
16:bd:80:b8:97:5a:8d:7b:5c:aa:27:f7:18:ec:22:ca:f1:2d:
cc:af:de:a2:f5:64:b4:40:fb:80:76:f9:91:66:39:39:5c:ae:
d9:62:4a:94:10:26:b6:54:7b:e9:b5:d4:f0:80:47:ef:8d:0a:
d0:a4:b8:e8:0f:cf:69:8f:fa:48:e2:4c:1b:ca:e1:46:77:0e:
51:48:35:29:35:b4:1e:b3:74:48:1a:54:fe:10:c4:ef:fc:9e:
e2:69:f7:a5:bd:ca:9b:05:ac:df:5c:50:5d:d4:7e:2d:96:31:
0a:79:f2:93:92:30:d8:63:33:ee:24:23:69:e0:20:33:96:73:
9e:f6:1d:d1:5d:6c:de:91:0a:82:a5:94:42:77:ed:d0:63:ef:
a1:e0:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:07 2025 by rpki-client