Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/166d2f33-fa5a-3b33-9616-2f20452a0daa.roa
File: 166d2f33-fa5a-3b33-9616-2f20452a0daa.roa (raw, json)
Hash identifier: Bs9QKWNNiSO1IlKmUmD4ihVw5BixAO0VdirzI2D9ShU=
Subject key identifier: CD:49:A6:E4:DA:F2:6D:31:13:0A:C6:1E:88:9A:4C:C0:04:A6:C5:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9625D23444F5C7E0CC33DA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/166d2f33-fa5a-3b33-9616-2f20452a0daa.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:25:d2:34:44:f5:c7:e0:cc:33:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=1e31c9cf-0862-4aac-b77c-42d486dbdc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9f:3c:ca:66:a2:1b:4b:27:65:8b:06:05:a5:
a3:c3:20:88:ba:2b:0f:47:cb:97:f3:92:b5:06:1d:
6f:86:06:59:4a:c9:c9:d2:0c:ff:e9:a8:af:b7:da:
5e:18:8d:69:32:1b:d1:c2:63:25:79:cc:4c:ac:cb:
42:24:d5:c4:48:f0:69:f3:ae:5f:38:f5:62:0d:c9:
03:4a:1d:7c:00:3d:1f:19:5c:57:f1:e2:6d:df:5d:
94:60:0d:7d:9a:0c:77:b9:f3:83:51:12:ff:12:95:
da:05:1b:3d:9f:e4:7d:66:cd:e8:b1:3b:b2:c0:73:
99:dc:86:c0:9d:a7:67:41:6d:76:2f:c1:47:e9:a2:
f0:ab:28:6c:eb:26:22:46:3f:c5:60:d4:9b:9b:11:
86:36:84:9a:10:34:a8:78:be:2e:19:99:21:bd:67:
80:45:03:75:35:54:4b:19:9c:2f:38:77:ff:25:ac:
33:e4:61:d3:75:3c:cf:dd:67:f1:a1:b1:19:0c:73:
a0:a2:e2:70:0f:88:b3:eb:7e:9f:6c:cc:0b:c0:44:
8d:1d:3c:b1:a5:12:45:d4:a9:1e:87:6d:3f:3b:47:
0a:7a:20:a4:a4:e7:15:88:67:a9:2f:ff:9a:57:24:
63:87:64:1a:b8:89:f8:f1:09:1c:c6:ab:c1:ce:8d:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:A6:E4:DA:F2:6D:31:13:0A:C6:1E:88:9A:4C:C0:04:A6:C5:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/166d2f33-fa5a-3b33-9616-2f20452a0daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c0:7f:db:19:1c:b3:7a:77:3f:9f:95:3e:1f:0a:f2:70:71:
1c:a2:ce:1d:d6:66:0a:3b:14:56:d2:44:2d:0c:17:e3:39:f8:
e2:92:93:44:25:f2:16:3c:85:76:83:4a:46:7a:28:54:48:d5:
15:c8:be:05:88:05:44:4c:df:8b:2c:8e:52:c8:f1:93:9a:44:
47:e8:20:5c:be:db:0d:ac:ba:25:cf:65:bc:1c:07:59:3c:b5:
2f:d2:95:d7:df:9c:fc:3a:03:d1:16:a0:93:35:02:c7:6a:3a:
b4:08:16:af:f2:79:df:d4:76:1f:a5:a0:36:80:b5:23:ec:b4:
53:b8:74:7e:92:b7:61:53:23:fd:dd:a9:f0:61:71:73:8c:5b:
f0:32:1b:28:9f:f9:bb:3d:b5:e5:80:91:a8:e8:68:ca:74:b2:
cd:04:9d:77:0a:8f:20:a6:b6:f2:45:ef:09:f2:36:3f:4b:b7:
1f:08:3a:fb:b7:d4:89:bb:7b:07:cc:cc:d1:4b:69:ce:a1:ad:
e3:8f:18:0f:2b:1c:a5:76:75:18:44:50:c4:4b:51:dd:8b:93:
12:3d:9c:a6:14:19:a3:2e:0e:3d:b2:74:12:c6:71:90:8c:28:
ec:cc:9f:68:bc:81:de:e1:aa:c9:75:71:83:54:4e:bf:d5:aa:
20:00:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:58 2025 by rpki-client