Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202353b-a5a1-362b-abc5-f7ec0b4fdbcd.roa
File: 1202353b-a5a1-362b-abc5-f7ec0b4fdbcd.roa (raw, json)
Hash identifier: qb4uhv690QzNb6Tf7SLhcW5hodeR5rONfMlLRsPzYo0=
Subject key identifier: 81:72:66:EA:26:FA:A0:9A:F2:57:AD:55:82:34:9B:DA:F7:7B:94:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EB637CC5D7A8BA448E6E000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202353b-a5a1-362b-abc5-f7ec0b4fdbcd.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:b6:37:cc:5d:7a:8b:a4:48:e6:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=9f0c8609-3143-40f0-bdd0-ef33aedc09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:cf:c4:06:67:7d:56:98:16:61:21:2e:ef:
9e:29:e5:6c:d4:69:e1:49:0c:b8:12:16:02:46:d4:
96:66:a8:18:ef:cf:82:6c:32:28:73:81:a5:4a:eb:
ab:33:83:7c:1f:8b:63:9f:78:2e:1e:d8:ad:64:62:
1d:50:2a:86:c1:ed:1f:d1:08:86:16:b8:a9:c4:d3:
34:68:6d:d1:1a:f7:1c:1d:d1:29:25:06:ed:f2:f2:
bf:cc:49:bb:bd:a0:51:f3:32:94:40:c3:bc:d8:6d:
38:6e:c4:bf:23:84:03:08:7d:e4:a8:ef:85:9f:a8:
c6:f0:ab:d1:67:7d:dc:18:43:36:90:26:bd:3c:4f:
bf:44:93:aa:02:98:20:71:b6:71:a5:58:27:fc:23:
63:ac:15:fd:75:a8:27:5f:c8:64:01:fd:58:f4:7b:
9a:9c:6e:58:7a:18:ed:5d:21:25:8f:a2:4a:3c:a9:
d4:a8:53:47:bb:08:c6:0a:a1:ff:02:60:02:9d:18:
15:fe:29:74:b4:94:1f:48:85:5b:66:8f:6a:1c:82:
54:f3:05:89:3d:bb:c7:5c:e6:e8:8a:97:b6:c3:33:
60:16:7c:09:e9:5a:b7:d3:8b:6a:2f:4e:89:1c:4a:
c3:1c:11:a0:3b:46:ac:dc:d4:9f:1a:a2:56:71:6f:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:66:EA:26:FA:A0:9A:F2:57:AD:55:82:34:9B:DA:F7:7B:94:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202353b-a5a1-362b-abc5-f7ec0b4fdbcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:5e:0e:dc:80:8c:95:19:50:fe:49:c2:96:f5:a9:d1:0f:52:
5e:de:e8:d7:9f:db:2b:d6:52:50:df:0e:19:d3:05:09:5c:54:
2c:09:83:90:f0:9e:21:b0:26:b1:9d:57:ee:f0:e6:73:53:5a:
7b:50:17:b2:76:5c:b7:b2:5f:fa:ed:4b:cd:1e:a9:d0:24:e9:
bb:05:64:72:fb:30:74:6f:04:9e:44:72:3a:cd:6f:9b:ed:f5:
e6:be:a8:32:d2:9e:32:97:a5:2b:d5:5f:e5:b6:b8:77:e5:ca:
69:00:9c:58:99:74:07:0e:04:55:f1:fb:64:b3:22:dd:10:1d:
19:75:f2:da:05:26:80:43:bb:cf:ff:04:b7:61:5e:13:5f:05:
16:9f:0f:24:b9:b8:60:1c:16:88:f4:b2:6a:89:cc:0d:16:df:
e1:c5:2b:50:a1:c7:ca:3b:28:41:bd:1a:6d:c0:68:fe:9a:e8:
30:4f:4f:1f:a5:be:18:f6:33:e9:7f:0e:60:67:7a:d9:98:1e:
f7:1e:20:dd:76:ad:3a:df:aa:8d:3f:21:f9:bb:c6:fc:2e:09:
18:e1:d6:1f:8e:52:97:b2:e3:a3:d1:70:1d:32:bd:91:46:ac:
dd:03:73:02:3e:4a:a5:86:77:56:5e:f6:88:09:5b:d5:db:62:
b5:21:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:58 2025 by rpki-client