Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee7cbafd-f449-3ddb-8b81-a82ef9413846.roa
File: ee7cbafd-f449-3ddb-8b81-a82ef9413846.roa (raw, json)
Hash identifier: KtXwtGveTW3MfzKQPRmAR6GgN2i5UMawNMY16wd1stU=
Subject key identifier: F1:0C:BD:D7:D3:6D:B9:CF:DD:0A:41:A9:BC:EE:E3:6E:A6:BE:D2:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584020359F1B497A610514306800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee7cbafd-f449-3ddb-8b81-a82ef9413846.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:20:35:9f:1b:49:7a:61:05:14:30:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=fe841497-5de1-4799-a68e-4b04e6745915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:29:ca:96:dc:22:47:91:98:7b:93:b9:96:
9f:fc:13:5e:52:c7:df:e0:44:ea:f5:96:9e:be:e4:
10:d4:f8:63:25:99:77:1c:d0:51:02:90:d6:77:1d:
b9:d7:a6:6a:b0:41:e7:de:7b:52:2b:e7:d9:a5:59:
d6:28:93:65:21:e5:e0:df:7a:45:40:3b:50:44:cf:
a6:ff:04:da:91:04:1b:58:e1:e7:bc:1b:31:0b:d6:
c7:59:27:39:94:fa:c7:6c:c4:3b:0d:cf:1e:92:ea:
a0:ca:c0:5b:9d:a2:2f:81:92:ee:55:d8:d6:74:5c:
f7:99:b8:d6:51:8b:11:c4:5c:d7:34:af:d6:79:d1:
d0:95:37:2c:90:4b:b6:f1:f4:75:42:1d:b2:2b:a6:
37:be:ef:c4:c8:a7:3f:db:c7:44:b6:f7:7e:94:d0:
09:62:22:e2:d6:47:ce:3c:7e:45:e5:da:59:0b:69:
84:e0:bc:e0:dc:d0:7a:8e:e1:1e:da:ca:ab:fe:d2:
f8:4c:2e:3f:36:1e:30:04:e3:d0:a0:98:04:95:ed:
96:47:6c:53:6b:a5:05:c5:1f:33:65:7e:7a:4f:73:
f8:06:55:8b:cb:c2:d8:8b:54:47:f5:53:d3:b2:c3:
5b:73:80:b4:50:1c:2d:ce:59:1d:24:21:2b:ba:06:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:BD:D7:D3:6D:B9:CF:DD:0A:41:A9:BC:EE:E3:6E:A6:BE:D2:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee7cbafd-f449-3ddb-8b81-a82ef9413846.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b1:51:0c:78:c3:56:93:e1:72:d5:c4:d1:1c:72:64:b9:a0:
27:ae:14:67:42:b0:fb:28:4e:c2:d1:eb:5e:b7:55:e8:02:b8:
16:aa:c2:ad:34:78:35:b3:49:e9:1e:0a:24:ca:f7:01:9d:3b:
3c:bd:32:27:0e:86:37:18:0f:f5:19:a1:c3:b9:07:5e:13:a1:
7d:c5:2e:e7:77:5e:c7:bd:53:31:13:54:04:b2:2a:02:8f:6e:
83:e6:83:fb:8c:ed:6a:81:c4:ee:75:a3:4d:22:78:0e:0f:0c:
83:1b:2e:78:52:ad:b5:20:e7:9a:98:5a:c3:09:26:95:b3:66:
9c:79:04:74:84:25:7b:18:d9:a6:76:41:3d:11:bf:86:67:cd:
11:81:d6:fe:35:9d:03:c4:28:a3:50:5d:6a:1a:c7:85:0a:b6:
79:79:d5:fc:bd:95:32:a6:df:45:0e:34:18:06:43:87:76:71:
6b:db:72:2b:e7:77:d3:58:bc:e0:c3:8c:17:cf:3b:37:8d:d6:
e2:02:ef:92:7a:2d:14:c2:41:59:04:70:99:1c:c0:bc:45:03:
f4:61:f0:11:b0:8e:c6:f0:98:b9:0b:25:1b:20:d7:6a:5c:06:
e4:43:df:bd:1b:f9:7b:ef:21:3c:42:31:87:e3:9a:16:0c:11:
9a:d8:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:54 2025 by rpki-client