Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa
File: 9caa5ce8-698c-381c-af11-4ad61d058015.roa (raw, json)
Hash identifier: nc8Rh4jwTYrG9GbVk6QF0pgMQZ+YA65YSq5doOoFXCo=
Subject key identifier: 15:2A:DD:6D:48:1C:66:F1:20:10:1B:1C:4E:57:D9:9C:63:07:6F:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406CEC70B90A01629841F4C900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6c:ec:70:b9:0a:01:62:98:41:f4:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=6f1be7f3-9470-4746-a77e-db0985466999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:1b:8b:6b:58:64:0d:ca:5d:5d:bb:5e:ad:
b9:34:a1:ce:a1:f3:2c:27:d4:91:2d:1a:89:db:81:
a8:00:37:aa:63:31:d2:35:62:e9:5f:b0:da:84:c7:
48:19:b5:2e:85:88:6d:55:21:06:17:28:0b:91:01:
83:13:1d:f9:78:a9:ac:1b:59:ad:3c:7c:89:e9:09:
7f:1d:10:77:bd:90:38:21:c3:42:3c:ff:69:32:fb:
0f:ca:e8:4d:f0:62:b2:23:8e:47:46:33:78:4e:20:
9e:30:3b:e5:d4:85:0a:e6:ba:8a:3f:5b:1b:c5:0d:
e2:65:2d:c9:8a:c0:6e:29:4b:f8:84:77:ab:a1:6f:
a6:6a:e1:78:1f:44:ad:56:44:b2:9e:db:62:58:25:
da:4e:f3:7d:5c:43:3d:b6:22:1c:62:1a:d4:f0:9c:
c0:d5:9d:c5:84:2e:d9:c6:e9:e2:93:29:af:56:a0:
5c:b4:55:30:1f:ad:f0:14:39:42:22:c4:50:f5:83:
bb:19:d8:f0:51:66:6e:bf:85:66:df:75:a6:d4:7a:
d8:34:84:9f:4a:85:b5:04:6d:b1:cc:8c:e6:02:44:
d7:03:bc:71:55:5a:20:71:1b:91:4b:c5:9a:1b:cd:
e9:07:d3:50:35:86:76:09:27:94:b0:34:99:62:42:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:DD:6D:48:1C:66:F1:20:10:1B:1C:4E:57:D9:9C:63:07:6F:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:e8:d3:d3:1b:de:27:0a:0b:71:aa:b0:93:60:b9:69:ac:89:
b4:40:d6:97:b1:e9:36:84:40:6f:6e:40:77:63:40:f9:27:c2:
f2:1a:21:cd:d1:43:54:35:c7:8d:1a:b4:d2:bd:23:c9:b3:3c:
08:17:18:5d:fc:56:e9:f2:fa:f4:20:5a:f1:36:8f:15:08:5b:
ad:70:49:79:a7:b5:59:54:41:b2:46:6d:25:1f:03:06:c3:52:
53:ce:4a:64:a6:e5:be:13:45:b4:21:d9:6f:75:38:d4:9f:b3:
a8:18:07:02:70:62:64:03:95:3a:f2:aa:c0:14:75:4b:90:87:
06:17:43:79:a2:1a:e3:8c:9d:b4:32:2e:7d:ee:12:41:b8:cd:
63:8d:80:9a:2d:23:a2:f1:4f:e5:22:7c:7e:74:6b:55:7a:06:
d8:8b:29:6b:a5:c7:3f:cd:e1:90:05:b4:79:c6:e9:07:86:76:
1a:2d:e9:cf:a3:26:81:27:bf:80:fa:e3:68:2b:1f:ce:c7:0a:
b8:73:a1:19:c8:54:f4:d5:68:8b:bb:44:49:14:6d:fa:f9:eb:
5b:eb:da:cc:72:c9:81:1d:02:f5:6a:74:62:a6:96:80:92:f8:
02:bd:10:a7:d5:4e:59:57:78:4a:75:54:e0:88:2a:8b:9e:1c:
c7:14:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:55:36 2025 by rpki-client