Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00fe36ff-6e9f-3b86-9b3e-a2e7e28e1921.roa
File: 00fe36ff-6e9f-3b86-9b3e-a2e7e28e1921.roa (raw, json)
Hash identifier: W5kykQY/F2XaloE7YHHWBJ+EAsIFGVsOQrq3Qp5RmWU=
Subject key identifier: EC:1C:B4:81:B1:7E:B4:65:D3:55:7F:1D:83:57:7B:DB:F8:B7:60:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95D3C8662765C7C9F5B23D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00fe36ff-6e9f-3b86-9b3e-a2e7e28e1921.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:d3:c8:66:27:65:c7:c9:f5:b2:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=0a2433f9-0dbe-4f51-a96e-5b360e0121ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:6f:65:14:89:4a:ba:e2:e1:a9:6d:9b:7f:
7f:a0:46:f7:d2:2e:32:ec:f0:91:18:43:1f:c2:72:
a6:df:39:49:5a:fd:b9:b2:d4:c8:36:2d:06:1d:86:
1b:61:2a:61:3b:9a:d6:1c:79:07:f6:91:d1:6e:9a:
08:0d:d5:dd:4f:11:97:cf:c0:6f:1c:db:c0:9c:76:
6b:ba:d2:cb:36:d9:14:11:57:30:0d:7c:7d:b2:36:
91:d3:cf:50:55:8a:bc:43:72:fa:03:7e:a9:d6:03:
0b:f8:fb:7a:33:e8:f2:54:64:dd:c9:4a:53:3e:1a:
60:c5:e7:ef:b9:99:77:2c:d0:80:94:5d:53:3e:0b:
a5:3f:7a:62:4f:af:52:53:71:3a:e6:76:84:89:4e:
5f:4d:38:e9:eb:20:cb:2b:5c:a9:f8:f4:a6:c3:51:
e1:75:b1:f5:28:15:30:7c:7c:28:09:ce:19:4f:fc:
e5:8b:f0:df:3c:7c:00:39:1e:ff:2b:ec:df:df:14:
29:d6:97:ab:11:70:0d:9a:fc:89:38:38:f2:0d:12:
20:26:19:bc:12:28:c7:78:23:5c:de:7c:09:70:10:
33:7c:d4:32:43:33:b3:2d:86:ab:c1:48:8c:94:a3:
af:04:93:9a:88:24:9b:11:78:e7:a8:9f:c7:4a:d1:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:B4:81:B1:7E:B4:65:D3:55:7F:1D:83:57:7B:DB:F8:B7:60:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00fe36ff-6e9f-3b86-9b3e-a2e7e28e1921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cf:0f:eb:40:22:1f:cd:fa:44:a6:8e:e5:68:b0:0e:87:dc:
04:9d:ec:9c:28:ae:88:35:5b:84:08:dc:a5:4a:e5:a6:07:b6:
05:11:f9:46:a4:5f:3d:91:79:25:8d:4f:bb:e3:9c:e8:26:34:
d8:da:27:58:0f:f3:0c:6e:bd:27:9d:23:87:21:2d:c9:f2:61:
50:63:3d:a2:7f:69:c6:5d:27:16:e5:9b:b8:e9:57:6c:d3:70:
e8:62:9a:a4:01:8c:13:e2:1d:36:2f:6d:83:86:a6:62:b7:3d:
e0:8e:eb:d4:02:20:02:c9:a6:23:c0:91:2f:a0:c6:4b:aa:fd:
ae:a4:00:3b:5d:e0:3d:f7:75:2b:a8:cf:bf:83:03:b2:a1:44:
ad:3b:9e:62:63:c1:e3:a1:cd:d4:ef:0e:e0:50:1c:e2:cb:a3:
85:13:5f:1b:9c:7e:3d:40:85:5e:3b:ad:2b:4f:12:91:ba:35:
29:43:a2:9e:85:c1:e0:ec:86:c6:2e:c9:0f:b5:cb:0c:4f:c8:
16:8c:48:95:50:e9:67:db:a7:1d:d0:4c:b0:5c:22:5d:04:3e:
05:86:b4:3d:78:22:b3:e2:ad:f8:b5:2d:d5:35:a6:4d:ab:06:
a6:2e:21:44:ee:d6:51:0d:94:46:13:35:2c:76:2c:e4:8b:52:
02:d4:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:15 2025 by rpki-client