Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f57377-4818-3f13-9b68-9b684bed0783.roa
File: 03f57377-4818-3f13-9b68-9b684bed0783.roa (raw, json)
Hash identifier: sjGyB4EYcB4Zx11oQZD+dpwJevYA8x4JLJ8hm1P8xjg=
Subject key identifier: B4:0A:26:70:3A:93:55:49:44:7B:9D:A6:9E:E4:6F:B0:2D:46:C0:C6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B32F403279BAA49CB1D8B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f57377-4818-3f13-9b68-9b684bed0783.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:32:f4:03:27:9b:aa:49:cb:1d:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a681dcd8-2bd6-4841-84b4-4bb5e6dc1b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:3c:70:a2:f2:9f:86:1b:98:20:0d:6e:13:
bd:b1:d5:fa:e7:39:80:ba:98:0d:52:36:a1:55:e7:
10:a9:c8:8f:0b:44:27:b8:21:4d:64:3a:8a:f8:aa:
e4:f2:ae:b4:8d:af:2b:20:02:36:52:ff:49:d0:31:
16:bc:4a:ae:63:32:90:3b:31:34:c4:b4:58:52:07:
f6:bd:3f:b1:41:34:ea:9b:c9:ab:2c:67:8e:e1:1b:
9a:2e:42:07:74:f7:0d:fa:df:a8:11:ae:f8:9e:cf:
b5:61:a3:05:35:31:85:3c:fe:a3:dc:26:fd:95:aa:
85:b1:58:dd:b2:47:fb:cb:aa:00:a0:d2:fa:f9:82:
a7:91:1a:25:4c:68:68:bf:b7:3f:0d:c0:be:6b:78:
22:26:fc:22:8d:66:d3:94:7a:4c:66:5d:29:af:d3:
6e:10:07:de:02:21:33:5c:48:06:69:a3:12:9e:3c:
d5:a3:fc:1c:5a:09:50:e2:72:c7:68:d9:99:6f:cb:
13:82:9d:51:b8:a6:37:82:9e:95:46:81:bc:1b:ff:
02:be:bf:7b:c4:3b:56:9a:04:d4:e4:77:4d:1d:31:
f9:4d:37:c6:20:64:7e:9d:cb:54:11:5b:d2:4e:21:
e7:9e:e9:8c:48:db:b0:9e:70:77:43:75:80:bb:e4:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:26:70:3A:93:55:49:44:7B:9D:A6:9E:E4:6F:B0:2D:46:C0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f57377-4818-3f13-9b68-9b684bed0783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:5b:1f:e6:65:56:ad:36:b7:c7:8d:51:d5:71:2b:15:38:e0:
6b:53:26:f9:3e:08:8d:3e:4e:19:19:a4:98:8e:ba:57:16:9a:
9d:c9:31:a1:de:9c:f1:46:dd:d0:61:97:15:00:49:f1:69:6d:
33:5a:78:03:5b:3b:88:36:3c:6c:77:54:d5:2d:73:eb:0b:f0:
9b:60:25:6e:0c:3d:4a:42:1d:38:e6:98:a1:cc:32:9e:59:0c:
98:a0:22:d5:6a:da:5b:55:71:4d:eb:43:ba:5d:ac:2f:9a:34:
60:f2:ff:0b:d3:c0:df:fc:99:e5:d9:3a:14:dc:47:3e:48:67:
81:4a:e7:70:d2:66:dc:d1:c6:3b:27:6b:c9:49:a9:47:46:47:
7e:b7:c4:03:5e:22:73:e2:53:1b:64:fe:e4:aa:23:64:6a:15:
00:8a:c9:e6:af:8a:78:93:0e:67:87:3f:d6:8c:87:17:1d:0e:
84:ee:b3:7f:5d:3e:92:ec:2a:da:9e:58:e5:27:66:35:d3:c7:
4f:98:c0:c6:fb:a6:69:c1:89:e2:b0:84:9f:c9:18:48:95:8d:
2f:cc:b8:a9:ed:f7:c2:c7:f7:21:48:67:3a:0d:ae:17:72:d7:
ec:e3:74:c3:59:1c:1f:8e:1b:f2:77:b6:9a:1e:64:b5:fd:08:
8c:f8:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:42:36 2025 by rpki-client