Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ad16da-dfae-3c16-b4bd-6d76684fe475.roa
File: f4ad16da-dfae-3c16-b4bd-6d76684fe475.roa (raw, json)
Hash identifier: wMPiKZXkpMdvT8CuZoP4Qq4Anwvk6YfmkAYWsTYA2MM=
Subject key identifier: 5C:1C:F5:E3:90:6A:0A:99:3E:2B:93:66:5F:C4:F3:98:C0:3F:AD:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840692BE52D7A40FD63DE088080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ad16da-dfae-3c16-b4bd-6d76684fe475.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.74.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:69:2b:e5:2d:7a:40:fd:63:de:08:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=9e499df1-b33d-47de-b5db-535e1721c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:05:e1:38:e4:4b:df:89:e9:69:47:ad:4f:
26:dc:a0:be:c9:e1:4f:c7:85:b8:4a:53:7a:7f:c6:
57:fb:c2:88:28:ff:56:fa:c4:1f:a7:87:3b:67:22:
e9:88:39:5e:2a:4a:ce:08:e6:ed:d5:f9:db:ca:c1:
d5:0d:67:93:2f:b8:ef:0c:70:e2:c8:6a:1a:f8:af:
03:f8:7b:61:98:78:5b:68:b6:e1:55:31:4f:cc:8a:
e2:9f:9b:d2:c3:21:25:b1:aa:35:24:b2:88:6d:f6:
23:72:6a:f3:d8:89:1a:e6:be:8c:2f:73:6b:72:90:
bb:e4:74:d6:36:f1:25:89:14:be:29:fe:ce:75:f0:
35:d2:11:72:90:7d:38:8c:31:6b:45:c2:3e:b4:47:
34:f8:10:57:a2:c2:a2:96:dc:cb:68:b5:7e:e9:2b:
da:b3:43:23:b7:06:ae:1f:38:c0:57:dc:47:0b:69:
33:d2:97:38:22:79:0f:1f:35:d6:85:67:b4:35:3b:
74:15:6e:38:5a:71:b9:f8:74:a8:ad:1a:f6:f0:9c:
58:6a:75:2e:4e:bb:05:73:00:6a:11:e1:47:0c:ab:
2a:f3:83:89:5e:54:a7:38:2e:72:cd:f2:74:cc:a3:
08:cc:8f:20:a5:89:63:ce:31:67:11:54:32:18:6d:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:F5:E3:90:6A:0A:99:3E:2B:93:66:5F:C4:F3:98:C0:3F:AD:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ad16da-dfae-3c16-b4bd-6d76684fe475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.74.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:2d:3a:ec:0b:22:23:88:fb:68:27:9a:67:2c:81:ed:41:ca:
c3:6c:d4:a7:5f:51:be:c7:ba:e6:a5:01:06:ac:e8:b1:29:70:
b3:ff:18:2b:cd:3f:57:af:fe:47:6d:bc:49:5a:e1:a4:38:89:
6b:04:a5:af:9b:69:a0:74:97:36:f5:01:9a:8d:c9:ee:2d:c2:
1c:bd:fc:8f:20:ca:d3:6b:eb:05:f2:0c:36:bb:c2:71:45:a5:
41:2e:85:01:85:49:0b:f1:19:5c:d7:21:1d:ae:34:de:d5:80:
84:e9:6c:ae:0c:dd:00:8c:26:63:76:1b:7e:c2:ae:d4:e6:fd:
2d:f9:84:1d:ad:c8:15:8a:d3:d1:98:ec:cb:77:ef:8b:51:92:
25:7f:70:a2:70:de:84:bf:13:d2:b8:e6:40:54:43:4c:29:77:
e4:26:8a:5f:ba:6a:05:84:21:b2:8e:6b:c0:9a:e6:37:50:cf:
7d:29:86:f5:da:85:9d:37:f5:83:b9:86:7a:50:23:af:02:f3:
93:f7:c0:6a:f4:24:1a:81:48:93:85:fa:c5:80:0a:16:d9:b7:
11:be:8a:58:32:78:1f:c9:27:e7:da:f8:d5:d7:c8:a6:f0:f0:
07:d2:60:24:c1:65:15:a4:80:62:c0:c2:ad:0c:b5:3e:06:92:
c3:29:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:49 2025 by rpki-client