Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/027dd004-b910-3939-a0ce-993e493ac3c0.roa
File: 027dd004-b910-3939-a0ce-993e493ac3c0.roa (raw, json)
Hash identifier: YIPoqeujuqPSoXkWNPtQmbH/2EpMFlN+iGf/XJ8OCq0=
Subject key identifier: 7C:EE:FA:1E:4B:7E:01:BD:50:25:9A:69:CF:EC:74:5C:93:2A:26:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD424F6BFC9B36D842208C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/027dd004-b910-3939-a0ce-993e493ac3c0.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:42:4f:6b:fc:9b:36:d8:42:20:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=665e83b8-022d-40c1-a6cb-75eda499360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:97:18:6d:ef:79:33:6a:03:a2:45:a0:0e:
77:9b:35:b5:92:d4:bf:bc:53:76:e6:4f:74:e7:98:
66:a0:c8:95:bf:6e:78:b6:a7:20:3b:8f:16:59:5b:
88:e2:ee:fe:73:62:86:cd:4b:47:ef:34:36:1f:c0:
7f:36:e5:d0:37:39:6d:5b:d5:b1:79:a9:af:a8:1b:
b8:b7:70:f7:3a:02:c1:2a:7e:ae:10:a4:b8:4c:e7:
61:5e:19:a8:de:27:b6:1a:e8:40:2b:ca:8d:7d:59:
ce:66:0d:af:14:1d:cf:ae:6a:42:c1:8e:ef:27:d9:
23:ef:27:aa:91:b8:91:61:cd:ba:1c:8a:e0:76:5a:
42:d6:5c:ba:d9:dc:11:f8:63:39:79:6c:49:06:9e:
2b:68:f3:32:ce:2b:92:87:45:c0:75:a7:4c:6e:fd:
c5:35:74:9f:8c:aa:96:7c:88:0f:97:3f:32:30:31:
71:e6:83:c3:6a:75:1a:44:46:77:08:dc:46:74:44:
62:43:30:5d:c9:25:f4:c7:16:b7:6b:68:02:c8:96:
b8:89:18:7e:91:ed:f0:44:55:a3:0c:c9:08:5c:c9:
9e:9a:7f:2b:55:b6:cb:cd:5b:84:22:c5:e5:2b:08:
54:5f:79:f6:7f:bb:78:38:3e:72:7d:ca:6c:a1:7b:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:FA:1E:4B:7E:01:BD:50:25:9A:69:CF:EC:74:5C:93:2A:26:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/027dd004-b910-3939-a0ce-993e493ac3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:a6:c5:ba:c0:5f:b0:c3:58:8c:47:05:c8:4f:43:4a:b7:73:
af:4e:ea:3c:e1:36:17:c5:7d:f7:9e:6e:b9:c0:b7:5b:68:17:
58:62:2f:7b:0f:59:56:5b:b1:db:5a:62:2d:a1:b6:8a:5e:1f:
ce:06:df:40:fb:a1:c7:00:c0:cc:c7:64:e0:9c:28:b3:44:d9:
6b:d2:cd:02:f2:58:a0:b2:77:e0:51:12:3d:d0:24:ab:25:89:
cd:ec:87:d2:cb:ba:db:b4:d6:80:d3:72:11:9e:db:fb:94:5d:
7f:98:73:3d:73:44:7e:db:fb:4c:65:11:3f:e0:13:0c:cf:2d:
ac:e3:bb:31:82:e5:ec:81:ba:e1:0a:c7:07:91:82:6e:12:17:
80:52:37:56:f1:fe:01:3d:84:71:76:ab:bc:50:ce:40:3e:2a:
b0:ad:15:11:96:0d:bf:bd:2f:97:ab:1c:df:95:b0:41:c8:90:
ca:62:49:8e:53:8a:0e:b2:e1:20:ae:68:13:6b:6a:0f:c9:da:
1b:4d:cc:c3:de:1e:d2:a7:62:7c:b2:b9:b2:10:da:6f:47:42:
03:66:97:cf:96:29:e2:5a:61:cc:3b:10:c9:b0:7b:b1:2c:5c:
86:91:c0:bb:19:5a:d7:31:a9:e7:c8:56:1b:a3:35:b3:0f:6d:
00:38:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:09 2025 by rpki-client