Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa
File: ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa (raw, json)
Hash identifier: mGekTIhjqwemuKRsZlWUQmgdgAMsgmr2XRtLV/Cqjlo=
Subject key identifier: 34:27:89:42:A6:15:E7:D3:1E:19:45:D6:8C:67:75:C6:07:91:17:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840947920A31EED683569648100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:79:20:a3:1e:ed:68:35:69:64:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=264083cb-5943-4720-9b2f-223b5e968698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:ab:a3:3d:1e:ec:78:6c:7d:e9:c3:fc:33:
fc:58:19:e9:02:4e:d6:48:55:47:d1:87:84:08:ce:
52:85:bd:bf:94:13:f6:91:d5:05:24:1c:22:5b:3d:
7f:8d:e2:08:34:90:d6:ae:93:25:3a:ce:42:76:51:
cf:c3:15:44:0a:fc:9d:2a:dd:cf:24:b3:ad:b6:df:
bc:0b:e2:80:a6:2a:9a:f2:28:fd:db:d7:dc:c8:df:
b6:ec:63:7e:79:99:0a:d3:05:a5:9e:5d:bf:28:aa:
0d:9f:17:47:af:57:d8:72:83:62:7d:0f:59:04:10:
50:50:82:06:6a:7b:0a:c7:28:3c:a0:14:b1:d0:83:
a1:4e:8a:37:2d:2f:44:48:25:02:04:34:bd:82:8b:
15:82:2e:4c:98:42:0d:ff:c0:8c:59:42:12:c5:38:
25:6f:92:09:8b:53:c0:88:83:ee:b0:61:70:80:a6:
ff:ed:c9:a7:6c:ce:29:5c:8b:f0:1c:d9:20:5e:1d:
54:d9:57:eb:0e:c9:2d:7d:ce:a0:5f:c8:26:70:9f:
57:cd:ff:6f:c5:d2:a5:17:fe:95:2a:ed:be:4c:07:
ef:a1:7b:63:1e:1c:5f:a6:c8:0f:2b:9e:dd:c4:6e:
b7:78:25:c1:33:ea:64:99:bf:cd:73:c4:55:71:3f:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:89:42:A6:15:E7:D3:1E:19:45:D6:8C:67:75:C6:07:91:17:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:41:72:71:fc:bd:e8:56:a5:7b:06:e7:8d:92:4d:fa:0e:b4:
64:4f:2c:a6:78:4b:4a:ae:00:35:93:2f:85:e6:70:27:2f:29:
4a:d6:ba:1f:43:60:9d:f0:01:ed:50:02:3c:46:90:d1:32:48:
4d:b3:6d:f9:04:91:e6:00:c8:ab:40:08:24:82:26:11:3b:45:
c7:df:5e:99:09:a7:90:56:5b:30:26:ea:1e:93:f3:c7:64:ae:
3f:62:91:5f:3e:82:c6:76:0f:35:82:94:32:68:87:47:95:b1:
aa:0d:55:09:25:03:24:0f:02:a3:d7:89:3e:90:e7:fa:66:6d:
73:c7:ae:90:c4:1f:65:c8:1c:e8:02:10:92:de:4e:b3:3f:ee:
18:0e:ae:a0:8f:a1:ef:83:c1:19:bf:d2:36:6d:32:46:06:98:
a6:7f:b5:ac:62:a4:15:cf:f7:a4:68:63:99:b1:38:9e:e9:e9:
97:a9:00:eb:c6:d5:2a:fd:ae:c9:f2:fc:f9:67:4a:e1:ec:31:
d0:0f:83:c4:43:e8:2b:cf:68:4a:88:15:34:44:79:c0:ca:83:
3f:ef:f3:21:b8:dd:6d:d2:18:f1:60:0a:90:43:d8:71:c8:44:
d0:ad:c7:d5:d3:5c:eb:9e:4f:d9:38:20:f7:00:ec:a6:5f:73:
26:a7:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:55:23 2025 by rpki-client