Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa
File: 97b99a48-c67f-368c-bb40-e3d61cf4d962.roa (raw, json)
Hash identifier: mAXo8hYJ4r3ykuAsqXd3EVrAqtPIJOrmnno4EG9Bq/8=
Subject key identifier: FE:A5:DB:EA:3B:39:F5:AD:03:CD:CC:90:B3:35:52:56:D3:7E:18:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584095510C7C9FD1D045F9BCE780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:95:51:0c:7c:9f:d1:d0:45:f9:bc:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=4ebb7e0e-4686-4b3b-a17c-d12b84a6dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:5d:a5:46:92:d8:3f:a5:28:9d:a5:dd:6d:
73:00:23:ad:a2:3a:ba:1a:93:d7:28:17:21:6c:b2:
a0:da:b3:f3:cf:47:1b:ad:0f:98:f8:66:d2:11:00:
9d:67:3a:7a:74:af:91:e8:8c:c0:ba:4a:80:9a:a0:
03:3f:8b:1e:92:6d:68:c0:1b:21:df:ec:b5:bf:0d:
41:80:74:e5:da:11:78:79:74:a8:eb:ae:ac:8a:dc:
b6:7c:69:d6:78:0b:b6:8f:4b:82:09:bf:58:f1:96:
a9:8f:89:99:5d:2e:95:93:81:e8:4f:db:c8:0c:2a:
4b:89:da:3a:d2:8c:d2:71:94:fd:3e:df:5e:f6:e2:
f0:cc:88:8a:8c:9d:f9:59:4d:31:cc:fb:b7:26:87:
d8:2f:88:bb:61:a4:1b:cf:d6:fb:68:45:3a:30:ab:
fe:ad:33:3f:a2:fa:da:ea:9a:54:28:8e:95:90:ea:
d4:c8:67:fe:8b:5e:b2:6d:d5:09:2e:3b:87:dd:df:
00:fa:45:53:dd:d0:13:21:63:d1:d2:26:ab:71:22:
b0:c2:8a:47:81:11:3d:8d:b5:8a:44:80:5f:9f:f4:
16:53:70:3f:72:94:dc:46:b6:82:81:b1:7d:bc:db:
bb:70:8b:49:6c:22:be:8b:cb:4f:c7:46:c2:7e:d8:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:DB:EA:3B:39:F5:AD:03:CD:CC:90:B3:35:52:56:D3:7E:18:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:73:6f:b5:f7:09:1d:38:a4:f0:35:e2:21:cc:57:be:8e:a5:
71:1b:1e:6a:59:7e:16:3c:e3:fd:03:3f:49:4b:fe:01:ba:5d:
3a:49:ab:2e:f1:ea:a8:15:72:df:45:e4:35:cb:ca:3d:2a:38:
4e:ca:12:8c:55:1d:7c:17:e5:b5:09:da:36:82:e9:d0:82:1a:
8f:f6:d4:96:ab:cb:0e:09:96:e7:0c:da:b0:f3:e2:24:4d:db:
f3:09:fe:6a:12:0d:7c:29:b7:82:68:43:06:10:7b:64:82:25:
a3:f4:5c:70:66:34:0d:d8:71:b3:aa:a0:15:31:8a:f2:cb:db:
03:6f:82:38:74:e4:00:b3:c5:76:fc:64:41:55:b0:e3:c4:88:
de:33:74:37:d0:b7:da:bb:24:bb:1c:d8:37:0d:6a:89:53:19:
18:b4:3b:8c:e0:3e:26:6b:73:17:2f:d3:a9:1b:a6:62:76:88:
19:52:f2:a0:6e:af:93:47:d8:57:87:cf:ec:c5:87:d6:3f:35:
01:3f:7b:c2:52:6f:39:de:88:9c:c0:a5:2b:62:c4:4d:c3:a0:
5f:74:b5:09:83:5f:a8:d0:96:6c:d6:ca:e5:67:8f:6e:90:58:
d7:72:53:ba:cc:3f:22:51:19:71:ea:f1:6a:98:a1:23:d7:f6:
b6:34:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:47:23 2025 by rpki-client