Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6e91ab7-b51f-39d3-8029-a876e68b87a4.roa
File: f6e91ab7-b51f-39d3-8029-a876e68b87a4.roa (raw, json)
Hash identifier: D3cnvkV7HkAO/16MzG4V5YezKVcChf6hLWHIEywZDLY=
Subject key identifier: 29:82:16:14:84:53:0C:05:BA:7E:C1:D8:AF:E8:C2:41:EA:8D:53:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406CDD8D62BAC45054AFC2E130
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6e91ab7-b51f-39d3-8029-a876e68b87a4.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6c:dd:8d:62:ba:c4:50:54:af:c2:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=8aa1bc5d-98e7-47fd-9367-f2924806f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:ac:aa:a6:b0:3a:4a:f4:86:ac:31:8b:c0:
ce:10:3f:40:75:c5:54:83:45:4d:ee:34:e3:7d:e6:
0e:03:f3:33:8e:cf:e5:ea:c3:49:77:56:fd:57:49:
8e:44:ce:f0:bd:50:50:c5:f3:7b:86:89:e5:12:d1:
b7:c2:71:a0:49:e8:3e:31:3c:9c:ed:d9:a5:5d:97:
2b:80:d6:1d:e9:8b:03:2b:25:6f:11:3d:f4:8f:a8:
c7:96:4b:5e:73:0a:e0:64:44:dc:cc:46:1d:5d:be:
59:86:5c:a4:6e:4e:f6:c1:df:49:89:ee:db:be:91:
46:22:52:5f:40:ad:2c:8c:81:da:53:54:81:bd:9a:
39:ab:ae:b3:f3:d7:a8:e6:3c:95:bc:00:a5:9c:ea:
dd:af:34:8d:0b:17:3f:45:80:e4:55:55:fe:70:e9:
d1:99:80:2b:5b:7b:6d:7b:24:00:d4:d2:ed:a3:cb:
1f:79:b9:32:01:67:2c:fb:7b:49:b6:8d:39:6c:97:
81:13:82:b7:92:f1:1c:f4:91:d0:36:2b:ed:ba:98:
da:a4:7c:f1:ca:19:3c:53:b8:c3:71:7b:7b:00:d8:
62:39:00:f9:d0:30:7a:4f:70:86:94:1c:5c:13:2a:
83:85:e3:73:70:84:57:db:f6:5a:0c:26:86:bf:4f:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:16:14:84:53:0C:05:BA:7E:C1:D8:AF:E8:C2:41:EA:8D:53:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6e91ab7-b51f-39d3-8029-a876e68b87a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:15:11:39:c8:5e:7c:35:b7:1e:9b:80:92:7b:02:02:0a:54:
e5:70:25:10:ad:e0:38:bb:de:f2:b9:d6:44:01:bb:2c:77:a9:
95:8b:ea:fd:cc:fc:26:04:7f:42:e7:de:55:54:64:4e:c3:33:
d5:26:e4:bb:9a:cc:20:0d:e7:40:5c:bb:b1:61:79:62:82:27:
5d:c0:a3:ad:63:02:32:8c:c5:92:05:4a:64:1d:9a:0e:7a:db:
78:b6:65:b7:66:2e:3d:fc:67:c0:e0:0c:44:09:97:6f:22:99:
30:6d:cf:5b:c6:fa:f1:57:c4:0d:6a:13:e7:a2:04:e6:d4:9a:
ff:59:29:12:9b:65:d6:77:1e:7c:e8:c0:68:ed:b6:c0:ff:44:
58:4b:45:a3:36:e1:fa:f4:da:b0:28:1e:3b:ef:f0:5c:74:30:
ee:8d:66:9f:e7:9a:e0:75:6d:6a:db:25:c2:dc:94:62:c5:38:
08:17:ca:d9:a1:7d:6a:21:75:32:09:a9:e3:5d:3c:7a:5b:d0:
ec:0b:a0:bb:e4:5d:e5:e9:b6:33:47:63:d9:2a:86:5d:b3:ce:
a6:f6:11:a3:48:53:02:66:da:50:5d:ac:bf:f5:85:00:8e:96:
45:aa:63:1c:91:52:ed:6f:5c:31:d6:63:c1:f5:24:02:7b:92:
08:e5:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:30:17 2025 by rpki-client