Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57168256-0f84-36b3-9233-7bec71631979.roa
File: 57168256-0f84-36b3-9233-7bec71631979.roa (raw, json)
Hash identifier: cGQU0Ze0l08WoQfifb+Knzn6TH1LvTGkcxSG0Qkcvz4=
Subject key identifier: D7:4D:DC:01:8F:2B:3A:C8:81:B6:0F:CE:B5:AB:24:98:A9:C8:41:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584067B03C9B4CF65ABA1F95D880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57168256-0f84-36b3-9233-7bec71631979.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:b0:3c:9b:4c:f6:5a:ba:1f:95:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=382b838c-6948-427e-8806-92bf46c68d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:4b:97:f8:18:47:9d:eb:c3:d6:9a:18:c6:
59:db:d8:51:05:8d:78:24:d9:88:49:91:e7:c1:0d:
b6:86:bf:9b:ec:89:1d:eb:f9:de:2f:c3:11:97:5c:
d8:bd:f9:ae:8b:4a:a6:19:f0:1a:d3:c3:83:6c:8c:
01:9c:7d:ab:34:d5:02:61:12:81:10:dc:69:68:80:
8a:52:de:88:ee:f3:f6:12:80:08:09:d7:98:ef:d5:
f4:38:b2:61:4d:59:c1:58:3d:4e:95:d6:3b:12:ca:
71:98:96:d7:6f:e8:a4:22:3d:3b:64:5e:e3:9e:4f:
28:fd:f6:1b:5f:0b:56:f8:f0:c2:3b:71:62:9b:e5:
cf:50:3e:db:4f:76:0e:45:e4:cc:31:70:ae:4f:a2:
84:12:cd:e3:b2:54:3f:b7:ec:f5:c2:fb:58:ea:87:
d8:35:24:0a:6c:fe:a3:3c:0d:20:a1:4c:cc:b1:09:
48:8d:d8:04:aa:59:7b:71:9f:e6:b3:f0:b0:1b:4a:
02:6c:ab:96:ad:a2:a3:a1:64:83:c1:9a:34:85:7f:
0d:85:b5:33:e6:7d:fc:3f:8d:17:90:ac:97:56:85:
67:45:55:29:53:22:57:f8:9e:59:2e:ef:33:0f:f8:
cc:40:c9:a6:61:fe:f2:63:81:4f:95:cc:29:78:4e:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:DC:01:8F:2B:3A:C8:81:B6:0F:CE:B5:AB:24:98:A9:C8:41:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57168256-0f84-36b3-9233-7bec71631979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ab:ce:88:07:1c:b2:3f:3e:b1:cf:6c:0c:f7:57:d4:eb:07:
76:67:8c:60:ec:c4:2e:50:c8:35:fe:83:5b:c5:50:af:48:f4:
49:1d:d1:8a:a5:a9:ee:26:48:82:7a:b1:c3:32:3e:b8:07:be:
79:50:36:3f:9f:8a:0d:ca:05:fd:72:a9:63:d9:3e:d6:05:56:
20:0f:af:68:58:a6:a3:c0:d3:ca:6b:18:6e:47:6d:b8:28:96:
2a:96:07:0b:da:5c:3c:fd:50:5a:67:ce:9b:70:66:b7:3d:2d:
d5:67:ee:d7:6c:18:5b:27:62:38:9e:af:2e:73:b3:88:c9:be:
da:03:05:87:1e:61:f6:cf:e7:89:76:a0:cc:d7:7d:df:36:09:
6f:75:99:c1:d2:52:57:db:db:03:2c:3d:3a:4a:a4:5c:41:03:
8b:2c:bb:23:79:c2:ac:b2:65:dd:a0:e9:c1:5b:42:8d:cb:2f:
b6:af:fa:1e:a8:f6:fc:84:f1:8b:9d:c5:ac:94:17:3b:81:7b:
2c:07:6c:7a:25:4a:43:23:7b:49:e0:3d:1a:28:88:cc:f9:67:
8e:5c:c9:86:a5:cc:c1:8b:7a:8b:37:fb:39:f5:0a:78:6e:cc:
b4:cd:43:53:a3:9e:fe:39:f2:ec:ed:e8:93:44:e5:6f:0f:ea:
d9:0a:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:41 2025 by rpki-client