Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb993108-ceaa-3932-bcdc-9f9d48b34c22.roa
File: fb993108-ceaa-3932-bcdc-9f9d48b34c22.roa (raw, json)
Hash identifier: NGw2baTz44WN8OfPvb98QDTgvlH5lTvYIoEbbQGe+Hw=
Subject key identifier: 6E:7B:9D:02:18:9E:73:D2:A2:6E:D9:15:EE:8A:9C:47:21:93:E9:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE80584E2A44826A20ADE900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb993108-ceaa-3932-bcdc-9f9d48b34c22.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:80:58:4e:2a:44:82:6a:20:ad:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=c016d2f7-63a1-4cf6-9214-3cd2f4904968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:fa:87:32:51:34:9c:52:21:42:e2:cb:96:
ad:46:08:c5:a5:8e:d8:01:d4:79:22:d5:5b:ff:aa:
4b:4f:04:52:3c:cd:96:8e:4c:34:bc:5a:0c:f9:65:
dc:3b:a4:1f:37:fb:95:5a:f7:f3:19:e4:c1:55:c1:
5c:65:79:1a:86:0f:f5:27:96:da:55:72:73:b9:e8:
6a:40:d6:78:48:16:52:52:31:b6:31:63:82:cb:20:
48:91:89:c7:12:a7:d3:29:64:00:8b:96:29:f4:56:
2b:e9:69:7b:5c:b3:91:64:8f:82:51:2d:a8:ec:9b:
12:b2:58:2c:45:32:7a:c8:ab:92:c3:4b:f4:91:00:
52:e3:45:6d:11:ba:9b:71:e7:48:e5:50:7c:f3:4d:
63:22:63:a5:d4:8a:2a:12:75:1d:96:d6:ed:4b:e7:
06:bd:8e:5e:13:22:ae:b3:37:4c:b4:77:76:de:7f:
79:cc:49:e7:95:06:00:cf:76:5f:cd:1f:51:5c:a9:
c3:96:22:61:46:b6:5d:c1:f2:f4:12:08:b7:c9:4e:
ee:69:21:84:03:5d:b7:20:39:3d:c8:de:e8:f8:f8:
7c:91:ee:69:ae:da:81:6c:94:f2:1d:5d:73:33:b5:
34:f6:3c:4c:64:98:e2:b4:9b:45:ed:92:da:7a:a2:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7B:9D:02:18:9E:73:D2:A2:6E:D9:15:EE:8A:9C:47:21:93:E9:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb993108-ceaa-3932-bcdc-9f9d48b34c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:27:aa:7e:92:c9:ff:63:0e:38:50:e3:45:5e:5b:64:d4:f5:
05:51:3a:74:35:04:6a:7d:6d:89:08:29:5a:9e:bd:ff:2a:0e:
ca:8a:ca:e4:c6:ff:36:94:0c:b3:49:22:57:62:ea:e6:a3:7d:
ff:5c:a6:b0:b4:65:35:ec:7a:92:71:5d:3a:fa:7b:ba:0f:a3:
d7:0d:ba:8f:ec:f1:fb:8c:36:f6:cc:68:9d:74:89:ef:0a:e8:
23:ad:e7:b1:b4:17:66:44:20:24:4d:68:74:dc:81:44:11:cd:
78:94:6c:21:c1:c4:8a:06:77:f1:52:d4:51:af:7e:89:bd:65:
72:53:0f:5f:48:7f:70:bd:dc:72:91:a8:da:41:6f:a0:29:7c:
a3:d9:fe:08:63:da:0e:d6:81:a0:5a:8c:a8:2f:36:38:af:04:
9b:44:52:aa:19:45:7c:8b:7f:25:91:1d:23:74:e6:c0:80:b4:
0d:20:80:6e:61:96:4e:e6:5f:1a:34:0d:b6:c8:22:1f:5b:d0:
21:b4:72:14:12:d0:32:e9:1d:12:40:c9:71:86:56:2d:ad:98:
bb:4c:21:36:e9:85:36:f7:28:d6:49:1a:c0:bb:ba:cc:aa:4e:
56:28:90:34:9b:f8:5a:92:16:69:09:a2:fb:99:78:be:8b:59:
66:49:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:35 2025 by rpki-client