Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3eccd7-e0dd-3509-b89e-ad5e2db187a4.roa
File: fd3eccd7-e0dd-3509-b89e-ad5e2db187a4.roa (raw, json)
Hash identifier: SrIcbZsO729FrW4UuxV2YCu2DLG7/tuA/5TUbi6DKBY=
Subject key identifier: D0:2F:27:0E:20:7F:18:EE:5E:8B:BC:0F:C1:85:5A:BA:87:C2:58:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840417289D3C009E053F5945A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3eccd7-e0dd-3509-b89e-ad5e2db187a4.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:72:89:d3:c0:09:e0:53:f5:94:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=6c9c7b98-a6d9-4a88-8036-5ebcda0130d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:bd:4f:fe:e6:9a:6b:89:ee:30:61:d0:83:
74:d3:64:86:7d:c0:bd:50:17:29:1f:ce:50:1a:71:
8c:fc:ec:ec:f5:7a:0f:06:d6:57:32:0c:c5:dc:6b:
fc:7f:30:d8:76:48:41:5f:51:e5:17:ae:8a:bf:49:
24:98:ee:86:ad:56:12:bf:40:c5:99:bd:b7:14:1e:
67:e1:3a:a2:ac:ae:88:29:6b:26:fa:1e:98:78:0e:
f2:2b:fa:94:72:9c:ec:ae:3a:39:08:fb:45:83:72:
4e:2d:72:05:0b:8d:97:f1:5f:93:b2:21:3f:08:e9:
9a:79:9e:74:8d:e2:9d:46:fe:91:dd:40:ab:7a:d7:
de:da:21:05:13:6a:d4:98:76:e1:c0:ab:5a:6e:0b:
0d:ad:49:f0:7c:d7:7f:16:cf:c0:17:83:51:3e:12:
a6:74:0d:39:c5:91:dd:dd:5c:8a:c0:e2:b0:b2:ca:
df:a2:4d:a2:14:ec:9e:d2:f7:a5:d6:1e:ee:2f:5e:
93:44:76:4d:56:f9:3e:49:0d:a9:5c:c4:6a:e3:be:
47:a8:3a:f1:d9:43:f3:c9:00:c0:da:bb:68:88:11:
f1:74:60:c2:ef:b2:cd:1d:df:4f:d5:fe:90:66:51:
8d:b7:d0:f8:25:08:b2:78:08:bc:2c:9b:e9:f5:39:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:27:0E:20:7F:18:EE:5E:8B:BC:0F:C1:85:5A:BA:87:C2:58:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3eccd7-e0dd-3509-b89e-ad5e2db187a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:1a:74:f0:ea:1d:38:9a:ec:8e:5c:2a:08:08:0c:31:cf:23:
03:fc:4e:75:58:f9:7c:ac:f8:41:d8:21:11:53:86:a3:74:38:
e0:f6:d0:25:aa:74:a8:0f:43:36:a1:f0:df:99:b0:35:a2:62:
1a:e8:e3:d1:26:52:74:50:ea:a0:50:36:83:b6:fa:c6:29:a6:
dd:74:19:f1:d9:52:1c:54:45:47:55:91:03:ae:8f:74:74:94:
8c:bd:00:0e:1e:01:05:0c:b2:59:fa:84:1c:b8:42:19:8f:dd:
b8:bd:57:2e:dd:f3:dc:f5:eb:9c:9f:b4:25:37:43:d7:81:af:
b8:f7:f2:3e:21:d6:41:f4:38:59:da:a9:2c:42:e5:25:3c:98:
ff:8c:a6:c1:23:65:04:d2:df:ad:9e:bc:66:49:0d:26:84:37:
92:cf:d1:1e:33:07:67:d6:04:d8:05:77:1b:2e:71:6d:f1:d7:
a8:d2:6e:96:9c:e6:13:68:29:75:21:aa:26:6c:8f:dd:74:3f:
3e:fc:c6:7d:5f:b6:86:15:9d:5c:57:14:b7:16:d2:82:c7:4a:
2b:11:ff:fb:36:12:d8:66:8e:8d:21:7f:0a:b6:e9:c2:85:40:
8e:7c:10:85:4f:7e:dc:81:e2:58:c3:1f:65:1d:be:35:bd:9e:
83:4d:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:12 2025 by rpki-client