Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7297f7-a786-3c46-9006-5b221bc0169b.roa
File: 0b7297f7-a786-3c46-9006-5b221bc0169b.roa (raw, json)
Hash identifier: x7lvZgu/1VzBNwPAO+Zt9Zq3FzBB9yf69K5J2wkLPaQ=
Subject key identifier: DF:27:99:B9:61:F3:BE:5A:19:EE:BD:BE:53:55:23:53:43:45:45:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B727F5CFE6BAA688FFA8250
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7297f7-a786-3c46-9006-5b221bc0169b.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:72:7f:5c:fe:6b:aa:68:8f:fa:82:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=1c30e39c-0322-441f-83fc-f5dba8cd21f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b0:58:fa:61:ef:9b:58:01:94:29:5e:f9:5b:
74:8e:50:49:fd:09:f2:6f:21:41:0b:54:1a:04:93:
1f:69:16:63:f4:9d:75:84:79:ec:ce:52:1e:99:20:
12:2e:ea:47:fd:90:f7:d8:09:e7:77:68:d0:6c:61:
66:ef:24:01:7d:0e:b4:ff:c3:17:8b:cd:cd:e5:32:
2a:28:59:d1:4b:9e:56:96:c3:14:1e:53:31:62:e7:
2c:e2:85:ee:5e:fd:bc:7f:60:e5:60:21:47:bb:7b:
d2:56:05:a9:b9:db:42:3a:27:64:a5:50:9c:d9:cf:
23:06:ea:32:92:5a:05:ce:3e:eb:34:35:c5:89:04:
3c:4e:c4:1f:3b:0c:6b:f3:09:4a:37:1d:68:71:82:
43:c3:a2:ab:4c:73:27:29:87:bd:1c:2d:d1:78:b9:
b0:d7:b5:83:60:68:68:7a:8b:18:d2:5c:98:58:b6:
ec:14:ba:fa:a6:ee:99:7c:16:4a:88:4d:02:1a:91:
de:f7:c4:01:2e:51:69:aa:85:df:a8:de:65:4e:93:
f0:70:03:3e:6a:21:4d:eb:44:5a:f0:a9:02:fe:87:
34:83:f2:b7:0d:c0:da:6d:ba:2b:19:c3:1c:8e:8c:
c9:1f:8c:07:3f:87:48:fd:4e:3f:72:7a:bc:20:50:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:99:B9:61:F3:BE:5A:19:EE:BD:BE:53:55:23:53:43:45:45:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7297f7-a786-3c46-9006-5b221bc0169b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:31:40:5b:b6:d9:5c:a9:ed:02:78:d7:9a:56:b1:8a:09:d9:
e9:54:95:18:2e:da:3d:94:5c:85:c8:a2:a1:4f:e7:ae:80:1c:
a0:af:2e:d6:11:15:0c:f6:3c:93:af:ab:94:d4:f4:fe:c1:5a:
3a:50:fb:d3:b0:57:3b:b3:6c:6d:80:22:24:ca:2e:84:6b:c5:
11:fa:ae:14:8b:03:e1:49:5c:37:d1:be:90:f0:b9:57:06:ae:
92:64:a7:15:df:f4:44:f2:95:01:f5:5b:fe:04:e4:71:26:1f:
31:7d:0a:7b:69:6f:f0:1e:b1:b8:23:f2:e1:59:e6:e1:25:fa:
9b:3b:4e:4a:e9:8e:0e:78:84:8b:10:b0:50:66:c9:b2:57:1b:
26:6b:37:9f:d0:ca:4f:6b:44:44:20:ba:8b:ff:ab:e3:3b:b3:
bf:77:07:eb:70:27:b2:81:e1:9e:5d:74:a6:dc:26:a8:d0:a4:
8f:e3:f1:b1:d4:0f:2a:50:48:38:8c:59:50:5f:b3:b1:55:4b:
c8:10:2c:1a:45:8d:1f:64:e4:1c:d4:d1:c4:e8:27:49:ef:d5:
d1:a3:94:3a:9e:e0:c7:e0:8c:5b:6e:b5:12:c6:2e:46:e1:cf:
59:b3:95:07:ea:4c:0d:f7:33:b1:20:cf:33:0e:41:29:76:14:
10:7d:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:37 2025 by rpki-client