Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa08e04d-d226-3841-803b-af40c5e5340a.roa
File: fa08e04d-d226-3841-803b-af40c5e5340a.roa (raw, json)
Hash identifier: GtwD3tmKwh+yXyXcXKKYCLcMsACsanOfbq4594ejymQ=
Subject key identifier: 42:6A:71:9D:97:C5:77:ED:6A:F4:BF:BB:11:B1:FD:36:59:FC:29:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EDE56F9D9F084D8B0528960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa08e04d-d226-3841-803b-af40c5e5340a.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:de:56:f9:d9:f0:84:d8:b0:52:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=efc5322d-e6ed-4dea-9055-98a908fe9d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:cd:00:a9:19:41:8c:68:d5:44:e6:2c:2c:
08:48:4b:70:ca:fb:e0:ad:74:93:49:ea:05:09:1e:
ec:a0:9a:b6:91:69:f1:14:7f:b5:c1:e7:03:b9:27:
ce:8b:d3:47:58:5b:ed:d4:56:4d:29:3a:33:1a:fb:
4e:60:21:86:ea:99:f6:05:a6:93:0e:c5:78:b3:ec:
a4:6f:b4:64:44:66:28:9d:94:ca:f1:05:58:a3:02:
3c:95:de:5b:a8:99:34:4e:bb:6d:26:a8:2c:f7:aa:
f0:ba:68:41:e2:31:cc:e3:c7:d2:66:44:bd:cd:f7:
c3:56:51:e1:ef:f2:1a:24:f5:20:80:19:00:84:bd:
fa:81:6a:5f:69:bd:15:0f:d3:b7:79:f5:2d:93:e4:
38:fe:53:39:b0:43:15:33:1b:72:b5:e8:c2:3b:c1:
7a:85:cb:71:7f:97:00:3d:ab:89:62:2a:14:70:ac:
ef:8f:0e:66:29:69:f6:c5:7d:07:e4:a4:7d:c8:21:
26:d2:26:ba:eb:9e:0f:1e:77:64:38:a4:6e:81:ff:
69:a9:42:f1:62:65:29:25:0d:60:9d:88:62:0d:58:
b9:36:cc:f9:e3:97:e1:58:8c:fd:ae:94:c6:e2:c7:
82:b7:c2:e5:89:ad:01:10:2e:54:50:3f:f7:67:76:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:71:9D:97:C5:77:ED:6A:F4:BF:BB:11:B1:FD:36:59:FC:29:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa08e04d-d226-3841-803b-af40c5e5340a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.93.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:bf:08:6b:34:94:23:25:e8:8b:a2:79:57:9e:f3:71:68:94:
af:40:60:7f:bb:a7:47:b4:3b:9b:ed:af:5c:e7:2b:95:92:84:
70:1f:45:b5:7b:c2:44:fd:d2:8a:7b:53:a9:85:fb:a1:87:37:
5e:cb:91:ee:f7:8a:7e:ee:da:9c:a4:24:7a:12:b4:4d:28:5c:
31:71:58:b7:ec:4d:c0:90:03:19:7d:c9:d2:b2:18:ad:b5:4d:
02:ac:8e:65:37:f4:3d:c8:2f:7d:a1:64:3e:ec:f4:2d:33:38:
89:37:4c:11:47:46:78:13:05:53:fd:ac:54:e4:a5:cc:33:4b:
ca:b5:59:3c:b7:7d:70:69:62:10:a1:9e:c3:99:4f:1b:aa:ee:
44:15:64:24:60:4e:fa:e2:6c:2d:90:9a:a2:09:1e:d1:1b:f8:
9f:36:90:55:82:aa:f7:15:7c:d5:c0:3c:bd:4c:fa:d2:0f:12:
3f:2e:ea:f8:4a:dd:ef:b3:b3:06:88:b7:6f:00:fa:75:11:bc:
3c:76:1e:41:bf:b6:a2:f0:5e:2f:d6:f4:c7:aa:ec:40:b3:cb:
8e:fc:d6:9e:f7:f8:58:86:24:6f:f1:d7:53:59:75:61:3b:37:
a8:54:5b:90:73:c2:b5:3a:84:80:9e:ef:f7:e6:4d:ba:b2:92:
67:ee:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:33 2025 by rpki-client