Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa
File: 14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa (raw, json)
Hash identifier: 5uqeT4fTxUiUxob3cTEG44Fn0jR1r02uD1d87hzDjOQ=
Subject key identifier: FB:78:32:98:B6:53:7D:28:8F:FB:E1:9C:BF:E8:15:A5:60:49:1E:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840948099E81B9EF72B019F8540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.88.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:80:99:e8:1b:9e:f7:2b:01:9f:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=80be5ea3-96b6-4496-98e9-ae8ce89686f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:b3:39:9d:cd:64:e0:31:78:1c:f6:7d:5c:
29:f7:9d:0e:53:2b:f7:bb:b9:41:ea:76:50:a8:9b:
7d:f7:64:7d:dc:ca:8b:4a:d9:e7:0c:2d:cc:06:ac:
0a:31:a9:a9:1b:c0:3c:45:3d:44:d6:ce:7c:b4:a7:
ff:7b:89:db:c6:a9:3e:23:c1:78:fa:10:0c:92:cc:
08:3b:00:a3:f4:09:a2:e8:0f:e1:c8:89:a0:69:6f:
21:52:60:3d:be:6e:a3:76:36:6a:37:19:5e:4e:ac:
32:e7:4a:f9:5e:4c:04:f7:4e:70:0b:24:c1:a2:cb:
b1:fa:69:aa:4f:5f:de:c6:7b:15:3d:a7:33:0c:a7:
0c:91:05:96:fa:26:83:37:c7:5b:79:c7:dd:67:d7:
c2:5d:33:05:ba:83:c2:06:8e:79:3e:57:56:be:a7:
30:d8:91:15:04:3a:cc:f9:82:51:eb:5d:69:f3:6f:
e1:e8:b7:7d:23:c6:4b:08:26:25:56:5f:a1:10:7a:
90:54:9f:e3:f7:da:64:03:b8:6d:db:db:57:af:4e:
1c:c5:20:60:df:a2:59:20:06:b6:e5:40:9e:e4:a1:
2f:77:3b:9b:4e:fa:67:9f:4d:fa:12:9d:02:df:77:
48:cf:61:df:ef:94:b3:7d:8f:4d:fe:dd:af:27:ca:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:32:98:B6:53:7D:28:8F:FB:E1:9C:BF:E8:15:A5:60:49:1E:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:d0:64:19:e0:94:ed:c6:e3:6c:18:28:ce:1f:fd:d9:8d:11:
da:34:2f:9c:7f:4d:f3:86:83:8e:b2:65:07:c2:bb:bc:2f:fa:
36:93:cf:b4:0a:09:24:a7:d4:82:02:48:a4:52:f5:fb:e1:ae:
34:9c:0d:89:32:9f:4b:08:0d:98:29:7d:9e:3f:7e:40:91:09:
5e:74:90:2b:03:46:1e:c7:60:1c:f9:37:b8:37:bd:14:53:c7:
0a:ff:0e:96:73:26:0c:bf:64:96:b0:4a:d7:ea:f0:72:b6:48:
73:5a:8b:4e:d4:89:b6:eb:bf:2e:b7:d5:8a:08:77:79:86:63:
10:2f:89:4e:04:d3:98:01:ab:67:40:da:45:37:38:a9:dc:b6:
f8:38:e6:4a:72:4e:75:27:28:29:5b:2a:b2:a0:47:81:20:ff:
10:57:5e:bf:04:42:d2:cd:97:86:1f:f4:a2:12:c8:eb:7c:b4:
a7:bf:b1:fa:23:4c:69:52:36:27:4a:1a:68:7d:27:92:c2:30:
ce:95:ca:6b:60:34:3a:36:33:4e:91:d0:f6:5f:5c:51:92:e5:
54:2f:11:d9:9e:4a:80:71:75:7f:5d:63:0d:3f:93:e6:5b:96:
07:76:1b:fe:5a:c1:bc:da:5a:97:66:9c:99:0f:43:68:5b:e0:
55:71:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:47:14 2025 by rpki-client