Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce178-5202-3785-9f29-2bf082ddb4e5.roa
File: 158ce178-5202-3785-9f29-2bf082ddb4e5.roa (raw, json)
Hash identifier: ktaTNOTd1BCl73Zk8l3pjHM+F+iICcwy75Iz8TfHF8s=
Subject key identifier: 04:D6:6A:BB:AE:CB:64:B2:7A:48:E0:EC:C9:F1:36:D3:A6:01:11:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE441A6466DD9971A1E3F4900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce178-5202-3785-9f29-2bf082ddb4e5.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:41:a6:46:6d:d9:97:1a:1e:3f:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=e9a9c383-670d-4a7b-ad0f-4449636c2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:7d:bf:ff:49:2b:d6:23:bd:51:6c:f0:c6:
bf:6d:e2:e7:69:09:7c:2b:2a:74:52:a9:9c:c4:71:
b9:3e:5c:3b:dd:47:05:87:05:bc:49:58:52:66:ac:
d8:90:51:ff:ed:1e:2a:87:34:b7:d3:65:16:07:d6:
47:bd:6f:57:cf:3c:65:1a:51:8b:26:95:19:37:87:
d8:62:4d:ac:ff:e3:d7:e9:b2:f4:17:76:b7:34:5f:
f7:99:83:7a:13:db:8b:96:a4:19:ca:23:1a:e4:cd:
b9:c0:20:4c:1f:46:10:d1:d1:9a:6c:2e:a1:09:1f:
22:93:77:82:ef:dd:0c:9d:6d:d8:35:92:eb:72:6e:
15:d2:0f:ce:28:fc:b2:db:a6:37:6d:32:cb:67:81:
59:1b:a6:93:d6:3e:c1:f2:6d:a4:cf:16:09:9d:ab:
7e:f5:a4:c7:27:56:78:b7:cd:52:e6:4c:49:c9:b2:
35:2f:de:3c:ba:c7:3b:85:ef:0b:9d:d3:00:fc:b9:
d3:2a:02:98:31:23:f5:37:51:87:6f:41:b8:9a:2d:
9b:9b:ea:d5:6a:b2:43:b6:2d:66:c3:e2:35:d5:fd:
c1:06:35:f7:31:f9:61:d0:45:8d:97:5e:04:5a:e2:
9a:d5:02:22:a0:ca:2f:23:54:74:e4:2c:4f:c8:f3:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:6A:BB:AE:CB:64:B2:7A:48:E0:EC:C9:F1:36:D3:A6:01:11:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce178-5202-3785-9f29-2bf082ddb4e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6f:c5:56:d3:2c:0b:c7:b6:2d:70:da:5b:dd:c9:41:0f:be:
51:a4:f4:15:46:34:c4:4d:69:64:95:68:7b:4f:e3:9c:09:ba:
40:bb:d6:ef:b2:74:c5:8d:3e:1a:a0:21:02:e9:62:b9:5e:51:
a3:3f:8f:4f:1d:bf:25:ce:1c:ee:10:a6:9a:d6:93:d8:78:40:
71:44:c5:da:44:56:d0:86:2f:cd:b7:a9:a4:96:fb:8e:ea:13:
1d:92:19:23:32:22:80:0a:d3:b7:ab:20:71:01:b7:ee:17:f6:
1a:ed:be:dd:53:c5:79:9b:3b:7e:82:55:4f:47:f1:52:8b:e6:
40:3c:83:88:20:96:ea:b2:8f:99:b6:f2:61:92:d8:53:79:89:
6b:77:53:34:b3:80:c3:b0:8a:60:50:d9:64:8f:b2:dd:16:da:
be:d7:14:e9:27:dc:10:7a:1d:c7:fc:28:b4:46:89:95:90:e3:
cf:f6:04:b4:34:aa:8a:57:f9:b4:e4:7f:5a:cb:d1:b4:c6:13:
14:c1:82:e4:b7:88:d0:c1:73:15:05:e0:c8:70:23:04:31:de:
e7:15:d7:22:37:87:67:55:94:3a:86:53:1c:67:c1:24:5d:04:
e8:c6:4f:2a:ba:16:d6:77:0f:5b:b2:38:60:5a:12:75:26:61:
c6:80:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:22 2025 by rpki-client