Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec8a4c69-cec6-38f9-aa0d-182a9b86994d.roa
File: ec8a4c69-cec6-38f9-aa0d-182a9b86994d.roa (raw, json)
Hash identifier: aJV/I137nbVudCTH1RNMQKP65zdMIxABw+2c+hEhidk=
Subject key identifier: AE:B6:81:EE:ED:84:27:35:E2:BC:DE:77:D7:F7:F8:FB:AB:0E:C6:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B7484C45B70FE44F93207200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec8a4c69-cec6-38f9-aa0d-182a9b86994d.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b7:48:4c:45:b7:0f:e4:4f:93:20:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=d7dc0e1e-add9-4879-9e8f-5c6ec7700457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:d7:b5:1f:7e:60:a7:7a:ae:20:01:85:a6:
68:c4:1d:82:17:9c:4d:b4:8c:c3:b8:40:ca:b7:45:
0f:ca:96:8e:33:1e:60:df:95:59:ad:d3:e6:23:fc:
9a:b2:dd:21:7c:3c:10:fc:86:a4:3e:df:96:79:1f:
99:57:1b:89:d1:1e:91:14:f9:22:8f:08:cb:47:e9:
b4:c6:ee:2a:e3:45:de:29:ed:e6:a3:85:ea:94:fb:
11:c5:4a:53:a2:90:5f:9c:03:c4:d7:fe:6d:04:63:
d1:a8:95:9a:93:ff:fd:8d:ef:3d:8c:b1:f6:c0:f5:
da:38:76:2d:1c:e3:ac:05:84:ef:01:25:9b:7c:93:
31:80:40:0b:fc:82:74:34:61:2b:92:af:6e:fe:04:
63:8c:3b:41:d7:52:3f:8a:66:25:07:fe:88:8f:c6:
fe:35:09:cd:c6:a3:1e:be:c3:78:95:50:93:e2:b3:
ff:8e:4d:00:e6:66:1e:3e:c0:38:ef:38:7b:6f:64:
0e:83:5c:7c:ca:fc:f5:81:db:24:6c:d8:f3:2a:3d:
28:a1:7c:2f:b2:ca:60:9d:2a:10:51:73:28:c0:8d:
d3:34:6d:fe:86:eb:ef:f2:ef:bc:dc:9c:90:8c:51:
75:0f:71:79:09:ee:aa:52:7a:00:08:85:1e:56:1a:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:81:EE:ED:84:27:35:E2:BC:DE:77:D7:F7:F8:FB:AB:0E:C6:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec8a4c69-cec6-38f9-aa0d-182a9b86994d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:19:a8:5e:d2:bf:6e:0b:a2:c4:02:ea:4b:63:76:b2:20:4c:
1f:da:c0:d7:e4:fd:2c:6d:bf:0f:e6:3b:6d:5f:dc:04:aa:67:
62:ae:91:2e:c5:17:6b:6c:7a:eb:c1:8b:19:77:7c:24:e3:92:
17:b2:e2:3c:2f:93:b7:b3:2f:2c:68:21:05:4a:05:30:a2:a0:
8d:48:99:1f:a6:e6:33:8d:e8:8a:a4:2c:a3:27:bc:2b:e8:24:
c2:b4:29:82:6f:11:6a:e7:61:51:e5:33:ee:46:37:91:3c:82:
05:65:ab:a7:8d:95:63:8a:86:19:7d:2c:f8:76:ab:70:f1:20:
50:55:77:34:70:24:2b:82:3a:81:24:93:02:d0:7a:1a:2d:90:
4f:c1:4f:60:06:19:3a:46:97:e2:fa:7a:cf:6a:95:58:39:bf:
a7:4d:df:5d:81:bb:fd:e8:a3:76:bf:0f:8b:b7:ed:56:a9:1a:
1c:14:d0:39:75:45:5e:d9:32:12:67:57:74:7b:30:5d:0a:68:
b7:8a:7a:3d:83:01:7b:f0:2a:16:66:b4:bf:e8:5a:01:ea:4a:
66:0e:22:36:56:1c:5d:28:cf:9e:6e:5e:00:d0:2b:aa:0a:ea:
ed:15:87:a4:82:45:e3:fc:79:83:d5:7f:19:ff:69:03:79:50:
ce:04:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:16 2025 by rpki-client