Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/086ed44f-8660-3c22-8ba4-8c5ccca76f92.roa
File: 086ed44f-8660-3c22-8ba4-8c5ccca76f92.roa (raw, json)
Hash identifier: 7HgK5J6/LNCY7AODX3e+1W+Nvv5emvwAkqer/Im/TxY=
Subject key identifier: E8:36:3B:4C:0C:20:21:C3:4C:3D:FC:C0:CE:E4:6A:6A:27:45:2C:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B31FBD573A0777A04AB46C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/086ed44f-8660-3c22-8ba4-8c5ccca76f92.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:31:fb:d5:73:a0:77:7a:04:ab:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a466ef15-6921-4650-a45b-9345e6a0678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:97:26:c2:4d:a9:fe:7e:49:c1:fa:88:c9:
38:0e:74:3e:88:03:16:70:dc:24:1c:54:ca:e9:95:
6f:78:92:34:8e:4a:74:52:e1:80:d9:48:98:5b:fb:
77:6f:ac:1a:1e:f5:36:83:4d:12:c0:76:c7:22:f7:
37:a1:c4:ef:45:fd:b0:64:27:15:e7:ed:cf:61:43:
98:37:f2:07:32:ea:09:30:5d:e0:50:1d:7b:5e:08:
27:18:b7:f9:8d:75:ec:e6:ec:27:e5:79:52:4f:92:
9d:60:5a:36:b5:bd:0b:e8:9b:99:67:11:01:c1:a2:
10:ee:05:12:58:74:2a:aa:62:e3:47:5f:31:5d:b3:
52:da:c8:4f:7a:99:b4:ed:37:82:54:10:a6:26:be:
c2:33:8f:83:0c:76:3c:bb:2c:31:51:a8:d5:d4:3b:
e8:3a:ae:92:18:cc:da:50:89:fa:7f:9f:14:ea:b0:
d7:b4:35:6b:cd:c6:af:a0:ea:66:63:0e:3b:71:07:
51:7e:6e:57:c4:dc:cf:8b:7b:08:d8:22:8b:48:4c:
8f:94:94:5d:b2:91:d6:5e:da:c9:e6:22:3a:e0:94:
72:9a:be:db:67:fc:33:73:9c:70:77:a6:79:3b:1e:
32:f8:c5:13:8c:44:51:85:f3:ca:f6:55:f4:9a:85:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:3B:4C:0C:20:21:C3:4C:3D:FC:C0:CE:E4:6A:6A:27:45:2C:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/086ed44f-8660-3c22-8ba4-8c5ccca76f92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:71:de:fd:95:1e:9c:46:86:cf:5d:02:de:5f:1b:c9:53:50:
eb:37:a2:0d:85:ea:70:e3:09:c7:9f:94:22:8b:96:00:21:83:
83:cf:c1:24:93:67:13:b9:73:9b:69:91:4c:5f:ca:5f:8d:4a:
1f:f3:87:b4:98:57:ca:ba:f5:28:7d:05:ba:1b:10:3d:68:a4:
2c:d1:da:bc:6a:cc:19:22:94:f5:a7:25:92:6f:0a:02:f6:3d:
81:b8:27:37:60:16:1a:81:73:95:cc:47:de:67:4f:17:1a:b2:
11:fa:db:71:39:d7:a2:90:c6:ed:2c:d1:28:66:5e:f7:21:4c:
eb:5d:ab:de:88:cc:68:46:c7:aa:ce:ed:8c:f1:3e:bd:de:11:
aa:d3:f6:da:6f:88:b0:62:b7:e3:48:29:e4:d5:12:fd:b6:9d:
25:b0:47:9f:25:35:d2:e5:12:47:48:0d:58:01:50:1f:95:89:
30:e0:58:28:9e:04:53:7f:ee:67:30:c2:ef:b0:70:15:b6:d7:
d8:3f:39:86:72:f7:ef:7c:ba:53:b9:43:52:4b:39:9a:ee:d6:
21:0c:1b:f7:02:42:56:21:05:2d:5d:20:fd:b1:20:c0:e9:ed:
90:0a:6b:cd:6f:28:a1:f6:e1:50:8c:f8:3d:c9:2e:06:03:b1:
20:d8:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:18:09 2025 by rpki-client