Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ff1854-2ed1-3a35-a421-6ef60ad3e255.roa
File: f9ff1854-2ed1-3a35-a421-6ef60ad3e255.roa (raw, json)
Hash identifier: XGD8rSEASX+K6zJ9Olglm8yzTeYD1kl1COuXoiEeCrs=
Subject key identifier: 53:46:7F:18:07:30:46:FB:F1:AC:C7:55:4F:CD:A4:F8:9E:EF:2D:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD139BABF78380CAE0098D780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ff1854-2ed1-3a35-a421-6ef60ad3e255.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:39:ba:bf:78:38:0c:ae:00:98:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=d3137875-ce29-4d2b-8aa6-5fb3a9314fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:05:09:d6:9e:98:c4:1b:b9:16:ad:c7:d2:
4b:98:d6:05:55:0a:29:94:23:0e:f3:42:d5:fc:87:
4b:b0:d3:5c:d9:b8:c5:f4:48:c9:6c:0e:6d:78:88:
15:92:58:85:01:86:b8:9e:bb:43:67:d3:a0:ff:2e:
c3:81:ed:f3:cf:c6:ff:66:87:c5:e7:e7:77:d4:79:
c9:f6:98:fe:7a:cd:a7:c4:b2:0f:2a:3a:b8:2b:3e:
15:26:a7:04:1f:a1:50:fa:b9:b5:5b:9a:7e:41:fe:
d4:63:44:7a:af:80:43:b9:99:f7:b7:10:12:82:2d:
48:7a:30:8b:d7:c5:5f:2f:7f:cc:fe:21:6f:e8:2c:
94:b5:1f:ac:71:79:e6:f9:f4:f6:09:35:3b:79:43:
49:dd:d2:ea:17:d0:e4:09:d9:ed:23:7f:9f:6e:c1:
49:c9:4c:7a:b2:7a:28:30:be:57:4b:da:98:de:fc:
06:3b:c9:80:c2:1c:0b:dd:58:2c:09:f0:33:b5:f2:
a1:83:a4:0f:79:20:d4:d7:c9:65:8f:18:71:62:5b:
bb:cf:4c:1b:a2:ec:10:f5:35:4a:c9:81:4e:8e:bc:
fb:4c:de:51:75:cf:64:1f:1b:0f:17:78:6d:09:70:
0a:8e:ea:52:38:a3:80:98:68:43:0b:09:50:9e:0c:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:7F:18:07:30:46:FB:F1:AC:C7:55:4F:CD:A4:F8:9E:EF:2D:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ff1854-2ed1-3a35-a421-6ef60ad3e255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:5e:38:c9:92:e4:ab:69:af:b3:42:64:74:ab:cd:35:77:5e:
6d:8e:71:eb:76:48:a6:f0:2c:a4:31:ea:ef:0e:2a:3b:63:8b:
d1:fa:9b:49:e9:81:01:73:0c:ee:83:20:c3:5c:0f:bb:0b:78:
a4:80:bc:61:c5:c8:2d:3d:99:a7:47:6d:ec:3c:75:49:e4:b6:
c7:30:ac:bc:76:3a:0f:5a:2d:ee:60:a4:50:95:48:3d:3c:46:
38:5a:8c:75:0b:0f:59:e3:ca:b9:58:3d:94:17:cb:68:72:8d:
fe:07:fb:3f:30:5c:27:de:7b:7d:a9:b4:08:e6:0a:47:c4:81:
66:0b:7a:2e:27:3a:ea:f9:80:06:47:89:7c:13:7e:15:8f:14:
f2:cc:1e:4d:0f:e9:a8:75:4e:9a:52:87:55:31:e4:03:3e:fd:
2e:a8:73:73:1a:19:ff:c5:22:e7:8a:0c:a7:cb:b0:31:1c:a1:
9c:3a:47:d1:d0:4e:17:f9:0e:34:bb:ca:08:a5:25:2b:a5:24:
e8:4d:7b:e1:37:b0:8d:e5:6b:23:87:8e:96:ae:bd:80:bb:61:
6d:a7:81:a1:a7:bc:34:c9:c5:c7:2e:be:4d:3e:39:fc:e9:83:
b5:60:cf:d9:33:b6:aa:80:17:b0:78:62:44:01:4f:1e:a1:e3:
f4:b9:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:18 2025 by rpki-client