Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f13c9dcd-c406-3e79-bc42-6696993dc72c.roa
File: f13c9dcd-c406-3e79-bc42-6696993dc72c.roa (raw, json)
Hash identifier: Vr15e2JdIb/hzUVirpKYA4L2FGfuy+vNrenk5CewgDE=
Subject key identifier: 32:5B:29:17:A8:F5:4E:12:4E:05:2A:6C:3F:D6:80:6B:4B:8C:24:C5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD095F1F562639E2FC62D3500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f13c9dcd-c406-3e79-bc42-6696993dc72c.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:95:f1:f5:62:63:9e:2f:c6:2d:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=5ee2a2e2-9d9d-4dc8-a88c-bd67d14380b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:fe:11:d8:87:37:8c:8f:67:fc:9f:38:86:
ef:d5:31:ee:ac:33:80:d6:93:a4:9c:2d:d9:f3:17:
e3:9f:b9:20:65:ab:c9:ce:30:a0:de:38:79:e8:a3:
8c:2b:77:05:bd:60:53:b8:d6:a1:88:5e:c3:9b:4d:
2d:af:eb:c9:09:f5:7f:f6:1d:9a:12:f5:f2:7c:bf:
46:6b:b8:5f:da:45:5f:d5:44:53:5a:68:b9:36:00:
bc:c9:09:e3:00:99:12:62:ba:61:1a:04:ca:c0:c8:
65:77:9a:46:59:e6:f5:63:d2:11:4f:fe:03:c1:8b:
c5:60:1c:74:6e:d3:63:fe:86:db:99:cc:e1:c5:b3:
d3:59:33:51:c9:66:ed:75:45:1a:dc:b5:5f:dd:e3:
4e:0d:e0:f7:82:f0:80:03:0b:0f:a4:2a:ba:f2:f7:
0c:03:f6:b1:ff:b8:af:d2:9b:d0:09:34:6f:84:d3:
a6:a1:1e:a7:d7:30:d7:a7:50:84:33:c1:56:39:ed:
86:48:05:82:0d:e1:98:48:96:6d:ac:e5:bb:f0:87:
ed:e6:5d:d8:de:48:6b:16:ca:f7:e8:58:90:58:0d:
2b:f5:fc:c9:81:66:e7:a4:f8:20:c0:ba:3f:1b:bc:
29:24:04:26:e3:24:4e:a2:a2:85:85:7b:e8:c0:6a:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:29:17:A8:F5:4E:12:4E:05:2A:6C:3F:D6:80:6B:4B:8C:24:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f13c9dcd-c406-3e79-bc42-6696993dc72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:d4:a7:34:12:b9:15:5d:8e:1e:7a:b3:7a:8a:b8:d2:69:28:
64:2f:3b:f0:da:71:9e:52:b9:0a:e1:af:6d:65:bf:8e:32:a4:
b9:85:42:eb:8e:c2:3d:41:0d:d9:21:65:b6:d6:77:cc:03:cb:
6d:cb:9d:24:40:ad:43:e7:b9:c5:f9:26:1b:f5:ce:4f:e9:0a:
54:da:ea:eb:4b:8f:c2:3e:33:3c:7f:af:94:60:78:b0:a6:bb:
cd:37:ee:5f:b8:a7:a1:7e:a0:ec:e8:48:fd:e1:c1:0c:7d:89:
f7:77:35:52:66:b3:45:b6:bf:33:62:d5:b2:aa:a8:12:0c:42:
d3:01:9b:30:84:07:70:b9:ce:d1:75:a4:5b:e9:57:69:01:8c:
63:80:b6:83:7b:30:ec:d4:42:5a:be:b4:36:67:98:7f:4a:f4:
80:8b:2a:25:a2:0f:b2:74:3e:1d:d3:ab:5f:ca:65:06:f3:4a:
dc:4d:90:b0:3b:88:cb:e6:ea:76:43:60:70:a4:55:23:90:d8:
ff:c2:03:26:cc:eb:24:c1:a7:bb:35:1d:e7:1c:bd:3e:ac:e8:
cb:fc:ba:75:9d:c0:83:44:fc:80:cd:cd:b4:2f:84:fe:e5:8a:
a0:39:d4:76:66:f5:65:34:cd:80:d1:e2:77:0d:e6:c5:da:2e:
8d:fc:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:33 2025 by rpki-client