Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b245098-354d-3e90-a05d-80bcfa26f6dd.roa
File: 0b245098-354d-3e90-a05d-80bcfa26f6dd.roa (raw, json)
Hash identifier: rAw0rZksCigEAZvQSZYTdQzhcL3UqgOqEHO7bdec+SQ=
Subject key identifier: 23:05:6A:A3:F6:C5:13:B4:FC:83:6A:B0:A0:11:3D:DE:DE:AC:34:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95D342B15CC23B1076D817C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b245098-354d-3e90-a05d-80bcfa26f6dd.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:d3:42:b1:5c:c2:3b:10:76:d8:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=3955ed17-6b15-4807-8468-5d244b994e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:01:81:42:d4:4f:97:d7:fc:f4:55:3a:3d:
94:a7:45:cc:c9:02:16:97:59:cc:cc:db:46:b5:64:
1d:54:2a:3a:27:ec:7e:3c:bb:45:30:56:fb:cd:4c:
10:5c:3c:7a:50:7f:ec:1a:1f:eb:be:be:82:f2:43:
fa:31:a4:27:9b:d8:eb:3b:78:54:4e:5c:39:61:5e:
d6:6f:66:70:5e:d2:5d:ea:e6:db:04:8d:4d:39:a1:
46:a0:6a:bc:97:18:d9:44:10:21:f3:8d:10:7f:62:
10:45:69:3a:5c:78:e5:06:a1:bc:8b:1b:8d:2f:a6:
bd:6c:6d:ed:80:79:29:08:b2:55:f0:7d:d6:0c:89:
c0:6f:40:33:05:23:d8:3a:c5:86:9b:ec:64:83:40:
09:87:69:85:64:b0:6d:43:bb:5f:19:8d:c6:88:e7:
dc:5c:dc:55:89:0c:34:75:21:f7:42:31:84:58:6a:
00:c0:e6:c2:0e:16:b7:59:13:1d:e8:0c:84:3a:1b:
fd:ca:a6:83:8f:60:0d:1d:45:63:cc:40:94:45:a9:
7b:c7:bb:26:7d:4f:39:f8:c2:f1:7b:3e:0c:97:7a:
68:6e:01:bd:c6:ce:bd:45:dc:01:40:a9:ae:8a:dd:
8d:17:ef:f3:c4:8d:e4:1a:87:11:f6:1d:f5:80:0e:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:6A:A3:F6:C5:13:B4:FC:83:6A:B0:A0:11:3D:DE:DE:AC:34:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b245098-354d-3e90-a05d-80bcfa26f6dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d8:94:9f:ac:62:3e:4b:96:2f:0f:e4:dd:72:1c:28:e4:7c:
5f:87:41:25:c2:66:e8:4a:12:b7:cb:b4:5b:f6:33:e1:a3:37:
3b:83:58:1a:73:2e:0a:e9:28:41:d0:78:fc:cf:7b:32:e9:78:
b7:0e:a3:06:41:b1:0d:c5:d4:5b:f1:30:a6:b1:55:a4:28:d3:
1c:21:bc:70:ef:da:6f:74:86:26:71:d0:e3:61:86:f3:ac:0b:
6b:0e:4e:7b:06:9c:c7:eb:aa:88:87:5a:05:66:47:4d:1b:aa:
fe:e4:b9:25:41:82:29:96:b0:b9:cd:cf:db:26:98:50:c3:a0:
3d:50:70:3f:bc:d5:e5:ef:7d:d2:e5:47:43:4e:b7:c8:12:17:
35:ba:01:60:bd:12:19:18:cb:f3:09:78:fe:c6:38:b9:2d:93:
32:16:04:d2:6b:89:1a:0e:81:0c:92:74:24:9d:2a:64:99:1e:
25:01:1d:dd:af:79:2e:5a:1a:f5:c9:4d:17:68:c5:dd:e9:9d:
79:2e:71:67:bf:87:24:8b:03:b9:6f:9e:c5:22:d3:4f:5f:0e:
a8:b1:4e:5d:19:4d:31:86:1e:07:62:28:81:57:d3:db:c1:2d:
44:7a:61:c7:55:ca:86:ff:6b:ca:e9:55:ef:6d:b2:35:89:06:
16:c5:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:01 2025 by rpki-client