Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f023e0ca-06ad-3765-8bdb-8e7638e2c48a.roa
File: f023e0ca-06ad-3765-8bdb-8e7638e2c48a.roa (raw, json)
Hash identifier: /G5fG/Yr8p7WMj1qePgYNutmjT9sH8f7ws0FAdLrVQA=
Subject key identifier: A8:BF:9C:FE:2C:03:7F:23:AE:83:52:61:FB:6B:8A:8A:94:02:C8:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF8749D3213FDF968F19E0C50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f023e0ca-06ad-3765-8bdb-8e7638e2c48a.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:74:9d:32:13:fd:f9:68:f1:9e:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=e15e0c32-62c6-4eb2-98f5-251c1131b693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:fd:1c:31:97:cb:9f:58:55:a7:84:70:e9:
8d:d1:8b:fd:20:d9:6a:87:54:67:d9:93:66:af:3d:
9f:1f:16:95:ae:37:52:57:66:fb:36:ed:0f:b9:40:
67:d4:1c:90:1e:a2:f5:a6:ca:aa:49:ba:9e:02:f2:
81:ec:13:0c:f5:01:9c:00:bc:af:e7:7b:01:b0:14:
5c:1d:20:01:8d:56:43:d4:af:37:ed:7b:9c:ac:6e:
8d:60:a8:1a:b7:7f:33:eb:ba:9f:9c:33:ba:c2:4f:
b3:d5:f7:53:c3:20:29:d6:c5:ea:57:70:e3:c1:6b:
1e:f9:d0:0f:da:04:eb:59:8e:7f:34:e6:f0:09:5f:
75:dc:b8:b0:c9:45:cf:97:f2:90:19:7f:1e:eb:c9:
8e:b0:af:6b:a3:6d:75:5a:4c:ee:17:48:76:2c:39:
84:42:bb:b1:53:6b:c1:13:9a:01:09:04:04:ce:60:
89:d6:ba:97:7b:90:b3:43:36:87:75:b3:62:06:f7:
41:b8:be:8a:65:2d:3d:b9:7c:41:03:3f:7a:d4:65:
32:14:b3:e7:23:b9:3a:d1:f1:c9:fd:c1:bc:ed:c9:
72:af:08:5a:4d:48:f2:2f:7a:35:0a:33:4e:c3:b8:
2a:a5:82:90:47:79:d3:ef:2e:1a:cd:a2:78:fb:56:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:9C:FE:2C:03:7F:23:AE:83:52:61:FB:6B:8A:8A:94:02:C8:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f023e0ca-06ad-3765-8bdb-8e7638e2c48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.198.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:0c:0f:64:74:04:fb:42:67:0e:d8:85:10:28:11:76:6e:34:
df:a8:fd:50:eb:ba:26:94:61:ca:c3:22:a5:69:d6:89:33:e7:
84:c4:a6:72:8f:70:da:b7:8f:b3:28:01:c2:c3:2b:14:fe:8e:
2c:49:46:36:5e:47:03:6c:2c:d6:66:e9:bf:6a:6c:43:aa:55:
dd:86:ca:4a:45:20:7d:aa:21:ac:5f:bf:c0:8b:63:62:91:29:
2f:70:c5:a1:4e:5a:3e:55:97:1f:2f:c9:fb:af:a0:4b:bc:ab:
7b:f4:ab:3c:84:0f:ff:f5:92:8b:d3:dc:98:ec:02:64:13:20:
65:d6:82:3e:05:9b:e2:51:de:ba:a9:00:35:c0:36:ae:a1:9d:
c9:05:5b:36:f8:a5:5a:24:fe:4d:de:f1:70:5a:e6:c7:16:89:
a4:bc:8d:a3:cc:0c:a2:d8:1f:80:1e:46:b8:fd:48:21:a9:5b:
17:e9:83:29:30:be:74:0f:e1:e3:57:be:46:c7:6e:33:f9:67:
ee:87:46:2e:91:67:da:04:f9:cc:ab:da:c3:f8:fa:ac:dd:2f:
26:b7:40:cb:dd:09:82:8f:3d:5a:e0:51:14:b6:57:8c:5e:3e:
59:5b:94:96:f5:1c:57:10:a0:0c:bc:fd:bb:c1:c9:31:d2:b3:
c6:a9:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:06 2025 by rpki-client