Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e42d3bd7-b891-31ea-bc0b-fb870fdf1770.roa
File: e42d3bd7-b891-31ea-bc0b-fb870fdf1770.roa (raw, json)
Hash identifier: cgZBz3lGcknKnrSZOXYuizbJerF1DnWHupl6uSXkCrQ=
Subject key identifier: E7:A5:9D:05:27:A4:C0:06:A9:0A:85:92:D4:A1:7A:A1:B2:43:B7:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7EE78A0906EC031AD480F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e42d3bd7-b891-31ea-bc0b-fb870fdf1770.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:ee:78:a0:90:6e:c0:31:ad:48:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=4bb4e2f9-3661-4e2c-bbc4-1f1bbd3ef758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:92:e2:46:29:21:6f:88:21:00:5a:72:f4:
e8:1f:46:3f:83:2b:bf:81:41:f9:55:43:c8:d3:17:
f1:76:a4:0b:cb:d3:3c:4b:91:1e:71:9d:f3:5d:cd:
8e:94:b2:a8:81:e7:3d:44:a4:df:06:0d:e3:3a:37:
90:17:1a:1d:4a:da:43:b1:12:8a:af:66:e2:a9:1c:
6b:7d:fe:87:1d:29:2f:96:07:d9:f1:16:44:b9:77:
18:6b:b4:69:00:06:c9:4d:30:9b:9a:40:13:6d:53:
32:02:29:b9:c9:9c:b1:44:82:1c:a7:d9:97:7d:ec:
0e:da:f0:59:eb:5b:e3:79:7a:76:33:48:3d:4d:36:
e4:ce:4e:f8:40:ca:ce:2d:94:ff:87:a8:02:d0:a6:
3a:67:63:de:85:e2:18:f7:45:89:e3:5c:06:0d:2b:
5b:39:3c:c0:70:a0:64:57:a0:0f:87:37:0e:18:49:
45:a2:43:77:32:07:e9:18:e8:19:ed:c5:83:62:06:
b5:a1:be:31:51:e2:f8:68:93:7b:55:8e:3f:b2:ac:
70:2d:19:5a:3b:66:67:64:26:62:e0:07:8b:3f:c2:
8d:4f:a2:e2:61:99:81:21:f1:86:ee:be:41:2f:f6:
e2:e4:60:7d:34:bb:dc:0d:a9:cd:dd:a8:dd:58:9a:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:9D:05:27:A4:C0:06:A9:0A:85:92:D4:A1:7A:A1:B2:43:B7:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e42d3bd7-b891-31ea-bc0b-fb870fdf1770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3d:61:f3:39:79:c6:b4:9c:03:88:c7:cc:a8:ee:c2:f4:06:
a2:fa:97:01:f4:dd:ca:87:a1:98:09:a0:34:41:46:aa:03:40:
df:85:3e:6a:1d:6f:fd:e3:2c:a8:d7:0c:1f:72:21:6a:5b:d4:
08:80:b7:2e:be:7e:0f:11:98:d9:0f:d8:c0:7d:90:a4:c0:e1:
c2:37:f1:67:3f:8f:ce:a8:6f:87:cf:c4:1f:c7:17:30:c3:98:
22:b7:d3:e3:7d:a5:46:7c:43:77:f5:70:63:bd:88:89:1c:7f:
6f:03:8d:21:cb:a5:ed:20:e1:c2:df:ed:09:3d:37:2c:7f:bd:
83:0e:ee:72:39:0b:0b:41:8b:38:ec:23:fc:ca:5d:f6:02:46:
57:e9:e9:b1:a9:3c:42:94:5e:39:74:99:93:bd:95:fb:17:df:
25:72:df:d1:5d:a7:ba:92:a8:ed:63:18:79:25:c3:8f:fb:40:
6f:79:18:60:5f:60:61:73:ea:fc:49:3e:04:79:94:ce:cf:b8:
3a:30:f9:70:02:6d:00:de:58:b8:56:4e:e5:97:98:ec:ac:8a:
d6:10:29:42:74:cb:8f:51:df:bc:6d:f8:a9:97:2b:05:f3:66:
6d:d2:67:8e:32:55:2d:ca:84:b5:fc:b7:21:dd:f0:46:61:32:
ab:c7:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:25:52 2025 by rpki-client