Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e594d68b-df9c-3bfc-bd50-f42b23281f0d.roa
File: e594d68b-df9c-3bfc-bd50-f42b23281f0d.roa (raw, json)
Hash identifier: UjnMLg2YHsR5CKkcPrkSfDo5UhaplMc3AJ37lXb/pz0=
Subject key identifier: 08:7E:A5:CD:5C:56:AE:22:39:13:4C:05:79:CC:18:9F:DB:AF:6B:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF2253BAECCD56539E4ABCD20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e594d68b-df9c-3bfc-bd50-f42b23281f0d.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:25:3b:ae:cc:d5:65:39:e4:ab:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=31ae48ab-15be-43d6-a141-097b92f5ba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:26:55:35:0a:65:90:e8:df:14:08:f1:5a:
52:09:49:62:bd:56:3d:f7:de:02:16:42:f4:73:49:
3f:6a:52:fd:30:de:e4:a6:a5:05:92:03:c5:45:a6:
50:90:8a:f1:34:45:4b:ad:18:9d:8d:f2:71:4b:b0:
6a:96:81:2c:36:af:67:64:45:c4:29:5c:0d:c5:0d:
bc:85:ea:0d:fe:2a:cc:ba:95:b1:0e:39:01:ac:e2:
6e:fe:fb:80:8b:47:0b:f4:17:ff:8b:83:12:c1:42:
af:93:d8:96:c2:aa:ea:71:0b:a2:9a:f9:a8:0d:43:
b3:27:3c:3c:55:5b:b7:9f:1d:df:9a:37:1b:24:6f:
50:c3:a7:2c:60:23:73:aa:49:db:9f:cc:1c:bc:5c:
3e:56:9f:be:77:f2:ab:23:ec:bc:39:d6:35:58:a8:
36:94:1c:10:22:bb:cd:4a:5e:43:fe:10:ef:cd:39:
33:7b:7a:54:1c:71:c2:87:6d:d7:37:ce:bc:41:36:
e8:67:8b:ee:ad:4e:5d:fb:3f:1b:81:6a:93:e4:10:
85:db:3b:df:04:d0:c5:89:a7:ab:9a:82:06:70:9c:
aa:50:75:ff:0a:e6:9f:1d:43:4e:0a:c8:32:73:b9:
5b:04:b0:e0:c3:b2:85:a1:98:07:6e:63:ec:51:26:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:A5:CD:5C:56:AE:22:39:13:4C:05:79:CC:18:9F:DB:AF:6B:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e594d68b-df9c-3bfc-bd50-f42b23281f0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ce:25:15:c9:66:88:e7:ae:a7:0a:42:31:65:ad:6c:6f:a7:
ae:76:dc:50:14:16:07:bd:68:bf:7a:e1:08:1a:0c:48:48:da:
37:fa:1c:df:db:4d:d8:91:58:4b:5c:8f:c1:21:2e:79:f0:21:
56:08:7a:a3:29:95:8e:25:b0:1a:99:43:ac:ba:cb:ce:ef:7e:
73:c2:f2:1d:e0:2b:23:0a:36:3d:45:f4:93:70:b7:f0:87:f5:
df:67:10:37:c3:5b:0b:09:7b:06:0c:ea:78:65:e7:04:fd:a9:
f6:2f:f6:2a:5f:49:7b:ba:57:7f:a6:e8:64:6d:d7:d1:39:03:
24:17:2c:ff:f5:26:7e:94:df:4a:a8:04:d0:0e:18:6a:50:3a:
1d:de:e6:b4:75:1a:b8:17:3a:01:db:15:e1:92:43:42:cc:f7:
37:a3:dc:51:4f:ad:96:03:b3:b7:6c:11:df:94:18:48:76:fd:
74:c0:af:d3:48:38:0c:45:8a:0d:af:27:8b:2b:83:bc:c4:72:
df:ed:c9:5e:15:c8:ca:69:34:a1:29:fd:60:2d:06:53:33:74:
b1:3a:fe:33:b7:39:d5:c3:ac:80:6c:18:3d:70:e8:c3:d8:1c:
65:9d:e7:4b:e6:b7:f8:6e:25:7b:05:95:99:ff:f8:59:41:5a:
dd:1f:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:45:35 2025 by rpki-client