Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100df6d6-31f6-3a95-b567-27223410f94a.roa
File: 100df6d6-31f6-3a95-b567-27223410f94a.roa (raw, json)
Hash identifier: cfIkh0iVV31X3Uz33H9HXGI3oitL9+6eQuHNP9Zu7cE=
Subject key identifier: 65:1E:73:37:45:26:1A:2E:CD:9F:96:07:23:D4:7C:6A:F4:85:F6:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD36A05B0613B475C781E27A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100df6d6-31f6-3a95-b567-27223410f94a.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:6a:05:b0:61:3b:47:5c:78:1e:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=9e6f848d-fe37-4232-814a-261a5e13ab05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:a3:fc:17:f0:90:e6:ab:eb:c2:0c:9e:49:
e2:dc:56:12:fd:f0:b4:aa:46:dd:dc:2e:23:75:aa:
0e:56:ef:07:0e:cd:11:a7:56:03:3f:bf:d3:d8:8e:
71:61:92:7b:bc:32:9e:67:a8:70:35:85:f6:4d:d8:
c4:81:a5:09:ab:fc:9d:e4:28:3c:08:99:e2:09:da:
c0:81:41:f0:2e:b8:3a:32:2d:a5:23:0d:26:d9:4d:
1c:5e:da:6e:ba:5d:20:51:38:70:21:ae:6e:8f:e8:
22:1e:72:ec:d9:22:c6:40:9e:da:27:53:17:d1:71:
3e:04:07:eb:72:96:49:9c:c1:f0:a4:1c:96:f4:19:
79:2e:70:a8:59:cb:ee:24:8d:fb:3e:db:86:a2:34:
f3:36:40:0d:0c:d3:6a:de:39:38:1f:44:ca:be:d8:
82:d6:4d:f0:a9:8a:a6:29:7e:83:0c:6e:5f:b5:ee:
21:5d:08:e7:75:2d:45:b8:5a:95:1a:d3:77:db:e3:
ff:6f:a7:c2:14:ff:71:0e:7e:f2:89:ef:e2:bd:78:
59:b4:fe:d8:1b:a7:91:04:57:9b:de:9c:e8:bc:bf:
4c:76:0a:66:53:95:bb:79:af:f7:35:fc:5e:6b:31:
ad:1c:00:90:e2:73:88:99:46:5d:32:76:8b:b0:6b:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:73:37:45:26:1A:2E:CD:9F:96:07:23:D4:7C:6A:F4:85:F6:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100df6d6-31f6-3a95-b567-27223410f94a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:02:98:eb:b4:b5:c2:aa:9c:af:c8:65:5c:6c:09:cf:04:cf:
11:79:7b:f1:ff:bf:2a:cf:fd:74:69:16:2d:05:47:a4:81:e5:
44:9e:e0:95:28:da:f2:a6:7f:31:78:89:c3:86:1f:8a:f4:45:
26:cf:89:41:be:5c:c8:2e:e5:b2:be:95:b2:f5:a9:03:49:fd:
47:35:dd:3b:b5:9d:34:85:cc:b8:34:27:28:e1:98:9e:3b:05:
e8:f3:30:57:45:5a:b7:a5:ea:f7:db:3e:12:ec:c7:0a:ef:ce:
1b:90:e1:97:52:6d:6b:30:3a:88:31:b8:3d:27:c7:d3:84:b1:
f5:30:35:36:48:0b:51:f6:fa:f4:f4:c5:5b:7d:d7:36:ef:b2:
ca:cd:27:c6:9f:89:54:3a:88:91:25:ec:ec:a1:70:ca:65:83:
fb:df:74:bd:63:43:b2:70:f0:c3:14:47:a6:29:5f:fc:12:fa:
bb:9c:58:fe:26:fc:b6:0e:6a:1e:21:5a:22:f4:5d:f9:5c:a1:
d4:a6:d4:80:9e:24:f6:a2:f4:12:fe:a5:f7:66:1d:0d:5f:bb:
1b:ac:c9:6c:78:d0:ac:1b:a4:d0:9c:3d:70:1f:14:85:aa:cb:
30:52:4d:8d:fa:ce:6b:49:61:aa:da:8f:35:42:77:63:ca:9a:
fb:09:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:32 2025 by rpki-client