Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/954e13ab-afe4-3b6c-95e5-cee0acd308f8.roa
File: 954e13ab-afe4-3b6c-95e5-cee0acd308f8.roa (raw, json)
Hash identifier: GDFzKfrgHEgmaKrgjS6btu53rqN1cHE01HXE8X63VBE=
Subject key identifier: 0B:07:9D:03:07:18:8C:54:7B:60:7B:87:50:AA:75:66:88:F0:C9:C5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B6B3451EE65D5D5920E64580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/954e13ab-afe4-3b6c-95e5-cee0acd308f8.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:b3:45:1e:e6:5d:5d:59:20:e6:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=5a00d64a-0465-44a7-9f5e-44116bacf4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:da:86:fc:bc:b7:07:7e:a6:f4:76:54:79:
61:66:84:83:a0:a3:1f:0e:79:69:75:ca:3b:93:85:
59:02:f0:dc:ff:0b:ad:db:2f:10:3a:ba:82:94:09:
ec:4c:ec:86:74:e1:db:b3:68:62:92:c1:ca:30:17:
6e:72:00:38:36:da:7d:30:59:58:28:bd:60:82:cb:
5b:34:55:d9:63:4c:15:bc:5a:2f:97:05:f7:31:a7:
bd:a9:cc:00:c7:86:9e:f6:5c:fc:65:9f:e6:b1:db:
f8:1f:b5:66:bb:18:0e:89:11:06:8e:36:57:d0:2a:
fd:72:3a:f8:54:7c:2e:a7:b4:eb:0b:ff:1a:98:ab:
0a:1f:9f:87:dd:a9:16:8c:6f:84:fa:8b:af:dc:34:
3e:9d:ba:75:f8:c6:4d:ae:93:df:1d:92:62:44:65:
9a:4d:e9:72:a6:af:5d:4c:bf:12:02:ed:73:9d:99:
f1:e2:97:28:d6:9d:b3:93:8b:c9:e2:4c:e7:e1:36:
62:37:39:91:dc:07:d8:85:89:20:15:95:e4:b5:22:
7f:7d:7d:e9:3f:c6:94:e1:2d:92:4a:31:1e:4a:98:
3a:14:7f:0b:40:06:2c:88:95:33:a3:f8:43:3f:fc:
88:3e:c9:31:3f:4f:17:34:37:f2:af:ec:06:5e:ff:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:9D:03:07:18:8C:54:7B:60:7B:87:50:AA:75:66:88:F0:C9:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/954e13ab-afe4-3b6c-95e5-cee0acd308f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:32:a5:7b:b4:c5:7e:16:91:e9:e7:88:3a:f9:ef:df:04:e1:
68:8e:7e:3a:ba:f0:be:0c:22:e5:13:d7:a3:27:5a:82:14:2f:
db:62:53:47:14:fa:9a:18:3d:b7:d2:2d:b1:7d:01:99:13:b3:
c2:9b:7b:fb:f9:bd:d4:de:b0:35:32:79:14:d5:cf:46:74:74:
3b:80:3e:ea:49:dd:60:7f:ec:4d:be:ba:c7:cf:a4:45:47:cc:
89:7a:50:75:a3:19:00:89:36:bf:c5:ff:a9:57:37:aa:3e:41:
b9:80:41:aa:08:52:4e:0d:86:dc:50:27:54:58:b7:96:f1:5b:
d7:7b:1e:93:09:bb:e3:67:00:c8:c0:25:a8:47:3b:c5:0f:b8:
a1:28:d0:71:59:7d:87:a3:90:9b:b4:8b:e6:48:64:f3:45:e5:
6d:52:34:a8:c2:24:e9:9d:03:88:a8:9b:ff:5c:59:f9:19:bc:
34:cf:f6:54:e7:49:d7:5d:f2:ca:ca:be:14:d0:36:80:94:72:
04:70:14:34:ff:a4:d6:6e:9b:70:56:d4:f4:6a:5e:bb:2d:c6:
de:94:5d:8b:d8:7d:15:3e:a0:c4:cf:0b:51:d7:c9:1b:c9:47:
64:ba:7c:21:55:e2:a2:1b:15:06:8b:34:d5:cc:33:cd:91:ba:
2c:d6:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:53:18 2025 by rpki-client