Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa
File: 0a9387a4-4dcb-351b-bf34-a01653aec017.roa (raw, json)
Hash identifier: FIWluR7SE+aMsAlLPnp8iuED4+TF19JHk4G8QXGUPSY=
Subject key identifier: 0E:F5:AC:81:CD:0A:D3:8E:5F:90:C9:E9:C8:A2:03:30:9F:AC:FC:50
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B5DB840069D0530F62EF9C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b5:db:84:00:69:d0:53:0f:62:ef:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=f2784e9c-cbf9-4ea7-9211-c004af857a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:c3:a0:1c:96:c8:3d:9b:83:0e:1b:dd:ae:
51:63:c2:38:fd:78:58:a9:72:59:42:8d:35:24:4a:
c6:9a:7a:cc:5f:8a:43:22:94:a4:35:82:7f:ed:68:
2f:41:1f:1c:41:91:ed:d1:37:8b:22:46:7d:7a:f1:
2e:9d:89:3e:45:6a:b5:44:b4:0e:fc:71:58:d3:72:
14:d0:17:77:22:a0:38:ce:e7:11:56:9e:47:35:f5:
bf:61:06:37:d3:6e:da:99:f8:e0:bd:e4:9b:bd:8b:
ac:9d:22:3a:64:c0:51:31:6d:12:36:38:98:24:4b:
f3:03:25:38:87:3f:03:24:54:b5:85:46:77:ed:e8:
d5:fc:3b:69:65:1d:2c:92:d6:93:19:3d:40:d3:10:
17:2f:14:d0:9b:4e:dc:60:58:6e:66:6f:74:eb:24:
b2:f2:44:cc:e1:a6:67:56:b0:9c:3e:21:22:99:76:
ae:a2:df:12:64:1f:eb:ee:b4:ca:16:23:26:ed:f3:
29:6c:2c:8b:2e:06:08:f0:52:d1:86:28:d1:89:78:
df:56:60:22:ed:1f:ae:82:31:23:58:8f:5f:63:8f:
68:b1:de:b6:52:8f:51:e1:cf:83:94:b4:ed:31:7a:
36:54:2b:68:a2:90:16:d9:fa:7d:79:1e:56:5a:81:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:AC:81:CD:0A:D3:8E:5F:90:C9:E9:C8:A2:03:30:9F:AC:FC:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f5:8b:8a:2a:e8:79:b0:c8:a0:fd:dd:d9:ea:bf:1c:33:47:
fb:8e:aa:4b:1c:75:0f:0b:a7:d9:8b:7d:71:d2:14:41:f5:26:
10:76:c1:76:f1:cc:c1:14:e1:4c:a4:6e:90:59:db:6d:d8:67:
08:ec:5f:ca:bb:ba:9c:64:93:a0:52:8f:51:26:85:4d:60:34:
95:df:0b:5c:a3:24:af:6a:14:cf:32:05:57:ac:28:53:bd:56:
50:78:f8:3c:f4:24:ec:3a:5d:5f:1f:bb:5e:93:42:13:8d:2d:
87:a0:bb:bc:88:70:02:3a:ad:1a:b0:66:31:3c:d1:91:b4:15:
72:ff:db:07:0c:b3:58:30:09:74:f1:5e:6c:4e:8c:de:d7:2c:
1c:7e:70:2b:af:da:c9:15:ff:f3:43:48:56:f5:89:14:e6:97:
84:ff:8b:80:cd:74:89:82:d3:0f:94:74:74:38:af:aa:45:97:
82:71:bd:04:c0:60:f5:6a:35:a1:3b:81:6d:7d:33:07:e2:6b:
27:9c:9c:56:49:79:f4:10:a9:90:21:5c:74:4b:77:fe:21:02:
23:5c:47:2e:f3:05:26:4d:32:cf:8d:00:54:4b:fd:4b:eb:c3:
87:ad:3f:24:f0:4d:0f:53:a3:aa:fb:8e:03:8c:cc:e7:48:db:
d6:69:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:53:22 2025 by rpki-client