Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f361e71d-885a-3478-a10c-ef85a6afee88.roa
File: f361e71d-885a-3478-a10c-ef85a6afee88.roa (raw, json)
Hash identifier: IrjMolrBin2cD7iY4VoOGTTa0F/T1Ln/hwZ+C+t5WHs=
Subject key identifier: A5:E1:8C:C8:0A:43:F6:80:7E:B4:12:D2:B9:86:2C:DB:B8:BC:87:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408F715A27F18B917E0B6758C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f361e71d-885a-3478-a10c-ef85a6afee88.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:71:5a:27:f1:8b:91:7e:0b:67:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=03b25f12-cc28-43e6-9f6b-462f2a1665ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:cf:a6:e8:96:f4:f1:75:be:49:7f:29:f9:
be:9e:54:95:ff:18:48:dd:87:d9:ab:3b:8b:c2:41:
b7:a9:fb:ab:06:35:c6:db:21:6f:21:df:91:8a:63:
8a:7a:42:2a:84:cd:37:58:61:40:7f:02:f0:db:c1:
18:58:18:94:1f:ae:4d:34:18:0f:ba:c9:28:a4:5a:
4b:63:b7:a7:ef:ad:e0:bc:aa:ae:95:c6:8f:f8:58:
d6:25:e7:d9:28:44:09:1d:04:4d:45:74:bf:dd:e3:
40:81:1e:8c:d0:d4:75:a5:df:84:91:53:4a:a0:c7:
d0:30:5b:c5:06:8c:69:16:18:34:2e:c2:52:af:d1:
d1:84:81:29:34:c5:b7:42:58:dd:09:44:cc:01:5f:
36:4c:b3:4a:f4:3a:c0:31:78:9e:ba:e2:a9:09:87:
af:eb:2a:26:ba:98:00:b6:a4:a9:ea:07:0a:41:61:
a5:2f:fe:b5:ab:72:d0:d9:22:5f:61:79:01:35:0c:
37:7c:8c:01:4e:08:a4:6c:10:89:cf:61:f5:85:1f:
84:93:6f:f9:9f:e7:7a:c5:ed:d3:2d:4a:6c:85:5f:
54:c8:99:19:f2:63:d5:1a:9e:01:8d:25:05:ce:5f:
06:1e:15:e5:df:40:ce:b0:86:3c:33:a2:3c:fc:84:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:8C:C8:0A:43:F6:80:7E:B4:12:D2:B9:86:2C:DB:B8:BC:87:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f361e71d-885a-3478-a10c-ef85a6afee88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:d1:0f:5b:9c:d4:6c:9c:20:f5:d3:9a:4a:a2:8b:2e:80:2a:
06:c3:17:17:c3:5b:68:b5:53:87:fa:4b:d8:c9:29:af:be:2a:
04:ce:79:b2:32:c2:43:a2:57:d3:3a:48:48:31:54:da:9a:73:
01:e7:d9:ca:e5:57:bd:ba:48:e8:8b:ea:7a:3b:e9:75:90:6a:
54:6a:7d:f7:65:2b:94:07:23:3f:a0:4b:41:f8:eb:8b:49:eb:
cc:3a:84:98:7c:5f:ca:db:f0:f3:39:40:23:58:1a:fc:eb:16:
10:a6:a7:7f:67:08:b4:a1:ea:00:64:9c:ad:ff:f7:56:25:5d:
e4:33:66:b4:5d:22:6c:40:03:95:73:83:49:20:1e:45:34:00:
a2:1a:ba:df:fe:ad:bb:9d:25:7a:24:bf:97:5b:ed:ba:aa:98:
85:48:4f:96:78:94:ad:e6:9a:9b:cd:f9:5c:b8:75:9f:b6:cc:
8e:db:6d:f7:d5:74:57:fa:cc:69:71:24:b0:18:59:02:48:0b:
d8:fc:d0:65:2f:e5:0e:7e:15:e6:e5:94:57:ab:59:9f:f8:90:
55:b1:c6:44:66:7a:61:11:c8:b7:91:fb:d2:92:32:83:6d:cf:
ad:49:58:26:bc:93:b3:3d:d4:dc:04:d6:99:d3:7c:aa:71:95:
fd:79:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:29 2025 by rpki-client