Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da72efca-613c-32d4-a4d7-6ada431ce3de.roa
File: da72efca-613c-32d4-a4d7-6ada431ce3de.roa (raw, json)
Hash identifier: uQ7rBCDYiOnTxAsIs61+LfBhaVWyupCfr/d2NVa1HqI=
Subject key identifier: 2F:1C:06:6D:30:78:09:5D:30:F1:60:28:6A:54:19:11:D7:47:78:F2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F341A5E5F8238092A1031DA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da72efca-613c-32d4-a4d7-6ada431ce3de.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:1a:5e:5f:82:38:09:2a:10:31:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=4ddcdf9e-5a0b-4d6f-becd-935923d6eee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:a8:cd:18:e6:b8:7c:b4:84:65:10:d9:ff:
ef:ff:bc:5e:5e:95:77:50:0a:d7:5d:99:46:84:8f:
c7:d7:d1:66:60:b7:1c:83:60:6f:0f:d5:5a:8a:79:
48:04:91:8f:40:b9:b7:7c:96:6c:fe:1e:2e:3a:15:
93:1a:67:bb:2c:22:1e:7a:c4:f5:a7:57:1a:5b:6c:
cf:33:0d:3d:cc:8d:78:6c:6f:9a:c2:85:41:a3:4b:
a1:0e:f6:96:17:59:7c:2e:5b:55:ab:b1:51:a9:d3:
33:86:71:e5:8b:a5:ee:1d:d4:2c:1d:35:de:35:10:
b3:d8:3a:82:ee:d8:dd:22:18:ad:ad:e0:15:38:35:
ee:a9:4f:03:50:bb:a5:07:75:5f:c5:79:ca:a8:a2:
8f:f5:14:7f:09:de:e1:7b:bb:12:c7:04:1b:83:30:
7a:55:9a:ac:f1:a3:f3:ac:e9:44:d7:8a:9b:58:8f:
4e:97:c5:87:46:cb:8f:40:b0:42:ef:a8:fb:88:31:
62:25:7f:c7:74:31:ad:b8:09:5f:48:4d:b0:92:c8:
64:6b:8c:42:d5:87:3b:5f:54:15:87:c8:4a:5e:33:
2d:7a:f9:20:26:f3:4d:fe:f2:b0:4e:e0:42:15:94:
9d:b7:10:35:04:b6:a1:6e:64:ce:b4:10:94:c7:21:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:06:6D:30:78:09:5D:30:F1:60:28:6A:54:19:11:D7:47:78:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da72efca-613c-32d4-a4d7-6ada431ce3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:bc:5b:5d:e1:ea:26:e8:59:e5:9c:3c:a9:e4:c0:6e:0b:aa:
f1:5e:1c:8a:96:a9:c8:31:69:22:f9:e9:4c:28:ea:d2:63:57:
08:55:1a:2c:ec:8c:f7:17:30:d3:9b:6a:a7:25:68:55:f2:92:
5c:6f:cc:cf:6a:3f:29:79:d1:07:f2:c1:ff:cf:8e:a3:36:00:
2d:16:67:98:86:43:55:9d:26:dc:07:50:df:20:2e:69:c8:f8:
05:f2:17:38:ce:56:19:1a:bd:94:93:df:2b:6d:bf:dc:3f:2c:
a4:38:8b:e0:41:17:d7:79:7a:cd:18:ab:38:ad:13:dd:dd:79:
92:a0:be:bf:05:44:53:aa:e7:9a:12:2a:f0:e4:cd:c2:8d:48:
55:4b:88:68:af:ec:98:5d:67:05:42:5e:43:b0:84:73:20:c0:
e5:c6:7d:fa:0f:18:7a:d1:d5:a7:90:3e:2a:d0:15:b1:30:c9:
9a:e4:4d:eb:ca:d1:dc:3e:aa:e6:29:00:ba:f8:79:08:72:f3:
58:87:a7:17:9f:94:f3:27:0c:21:42:4f:fe:80:df:3d:fc:bb:
65:df:0c:2e:da:67:9c:1f:f3:c0:f4:0b:72:3e:7a:28:2d:9e:
93:45:44:82:94:f7:5c:5a:19:e3:b5:c9:75:ca:c0:9f:2b:6f:
69:3e:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:47 2025 by rpki-client