Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1957047a-c0ce-3ee3-820a-886b839519b6.roa
File: 1957047a-c0ce-3ee3-820a-886b839519b6.roa (raw, json)
Hash identifier: B4UjGvMQV00jnlk9kb633WHDl3rkMR1zplPdxN/oSnI=
Subject key identifier: 37:A6:74:AD:78:70:38:22:EA:3D:3F:5B:EE:1B:60:24:C2:7E:6E:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAD1D9C4F0E8DB2AD6310A200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1957047a-c0ce-3ee3-820a-886b839519b6.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ad:1d:9c:4f:0e:8d:b2:ad:63:10:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=392b50f2-73d8-4951-831d-0df6c9105c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:3a:da:56:03:ab:51:27:c2:f2:b4:24:c8:
ed:3c:e9:78:29:54:b9:3f:c2:75:69:8e:ab:63:48:
92:27:70:bb:54:f9:e2:4c:35:82:ed:f5:2e:f7:ff:
43:75:99:b8:ae:24:20:73:76:c5:df:b7:cd:06:6e:
92:ed:aa:e8:38:bd:36:ae:f1:a5:45:02:54:30:0b:
1f:9f:da:bb:65:3c:c4:0c:7d:01:d6:45:53:4b:bb:
b1:fc:9c:1f:4f:8c:fe:5f:a4:9c:a9:7d:ed:67:8f:
56:b9:8d:0f:f7:d2:0d:ea:d2:be:4f:1d:ad:14:80:
6e:f7:e0:68:84:aa:17:fe:52:8a:a3:01:e8:c0:03:
e6:4e:ad:4f:af:23:b1:31:a7:94:fc:40:7a:8a:14:
a5:fb:f1:17:55:37:0e:90:58:f0:8d:15:32:d1:9f:
b7:7c:5f:9e:fa:77:e2:9c:e2:39:b4:4b:19:25:7c:
7f:db:e6:58:dc:08:42:32:cb:3f:4a:13:51:5e:2d:
2a:b7:73:d6:f9:35:92:c0:26:5f:24:56:13:34:8a:
38:91:c6:8b:fe:ef:31:e9:91:a1:b6:98:63:9d:5a:
89:29:65:bd:ff:3b:16:d0:98:51:c1:57:31:77:f1:
2a:ce:85:9c:5f:fd:ce:5e:09:dc:02:0d:c5:ef:7d:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:74:AD:78:70:38:22:EA:3D:3F:5B:EE:1B:60:24:C2:7E:6E:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1957047a-c0ce-3ee3-820a-886b839519b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:14:ea:b9:1f:e1:48:af:4e:0e:41:e6:47:4f:0b:69:a2:40:
e2:a2:78:26:7b:07:b4:2f:0c:16:74:9d:77:8c:94:49:06:72:
d6:d8:40:5a:5b:d3:1e:3c:8a:0c:60:f3:ad:59:f9:a7:9f:9c:
5a:d9:c2:26:bd:8f:94:a4:e1:62:50:a0:e4:ca:e1:ee:d0:8e:
e8:1a:9b:06:65:90:66:82:ff:2a:4e:c6:8b:7c:81:55:eb:74:
be:5c:be:25:2e:d3:62:a7:87:c8:05:d9:36:8f:44:77:31:07:
3b:8c:42:3e:76:bd:32:9a:f0:d0:ff:31:2d:03:da:f6:6d:25:
db:39:fe:78:00:5c:f6:6c:53:18:6b:fc:0c:07:4d:39:0c:a2:
2e:1e:2d:c6:a8:b9:f5:05:78:29:22:db:cc:4e:50:83:be:f4:
27:f9:de:f0:84:df:63:9e:6e:78:a6:2f:a6:c6:74:fe:64:c1:
59:ae:17:45:f9:f7:69:a6:91:49:22:d3:78:13:f1:26:cd:43:
d3:a4:84:07:60:87:8a:9e:4f:24:46:47:c0:d9:0c:18:ec:c6:
ad:ae:25:cb:ec:94:f7:fa:f3:bf:aa:cc:a6:f9:d1:94:fe:83:
73:61:bd:2f:40:3c:d3:e5:3a:44:9d:b9:6e:1e:2f:d1:42:98:
f6:58:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:06 2025 by rpki-client