Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/199d2edb-fdb5-386a-b73b-90c33a4754a3.roa
File: 199d2edb-fdb5-386a-b73b-90c33a4754a3.roa (raw, json)
Hash identifier: iyREMKBzRZU+FbuK+g+kzX6YZSpQ9aSSKMJkkc1aZF0=
Subject key identifier: 61:75:7E:33:68:D5:2F:52:FC:74:86:DA:D4:FA:D9:9F:68:0F:A0:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EDC39E57C8DCA10E4A56F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/199d2edb-fdb5-386a-b73b-90c33a4754a3.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:dc:39:e5:7c:8d:ca:10:e4:a5:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=541a7e3a-db2f-40da-ad21-fd8e4144c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:26:7b:73:51:4f:3a:56:f6:e5:b4:3b:03:
f5:24:88:0e:a8:05:24:1d:4c:e5:d8:e1:8b:6b:c7:
ff:3f:dc:1a:17:62:b5:50:26:66:e7:75:3e:f0:f7:
9a:8d:ba:4f:83:14:bc:7e:bb:bd:f2:da:cd:db:a7:
9f:3b:1d:5e:15:95:8b:2e:86:52:70:e5:97:72:c7:
12:c5:87:2c:0d:06:08:43:e1:82:93:9c:83:a9:a1:
68:ae:05:69:f6:9b:23:f6:11:5a:a6:48:8a:86:68:
a0:c2:54:bb:ff:cf:b3:2a:bf:47:d1:76:2c:32:92:
87:f9:47:b2:1a:c5:4d:36:65:4d:0a:e5:d3:66:70:
bd:7f:27:4c:1f:14:3e:71:1a:e4:57:8d:4a:76:c8:
d1:b8:33:85:ed:e9:31:c9:6a:9e:a8:0a:f8:10:54:
63:1f:ed:28:d4:23:cf:05:b0:e7:52:90:52:d9:de:
b5:83:5e:aa:27:23:61:1c:cb:ea:56:4c:7d:4f:2e:
1b:02:04:6f:2f:00:cb:c6:53:86:82:7f:6a:fe:44:
94:ff:40:70:54:e8:f4:6a:c5:fa:b8:fb:f9:a9:1f:
96:1f:a8:7f:37:5f:9c:6c:a1:ce:05:57:be:15:d3:
fe:e9:b5:38:b3:48:a8:9e:21:ef:c7:09:16:df:0e:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:7E:33:68:D5:2F:52:FC:74:86:DA:D4:FA:D9:9F:68:0F:A0:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/199d2edb-fdb5-386a-b73b-90c33a4754a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:a7:e0:b1:3d:ae:00:3d:a5:1b:d8:c9:4b:05:25:fa:9c:68:
e1:ea:23:be:0b:78:c3:c1:a9:86:49:01:89:ba:e8:01:16:8e:
ee:1a:1a:f7:65:9b:45:df:7e:62:df:83:9b:99:7b:f1:d7:c8:
a1:93:c9:ac:4f:6a:fa:fa:67:18:c2:4a:e3:1f:70:ca:0e:7e:
8a:ce:74:ba:13:dd:03:5c:c6:1a:aa:91:1c:4f:c2:cf:38:7a:
ff:1e:0d:52:04:29:6c:5a:32:ed:af:38:05:75:dc:96:b5:01:
ce:64:52:e7:1b:8b:20:6e:28:0c:f3:4a:5c:9e:f6:5c:82:a1:
97:95:1d:10:57:6a:32:79:34:3d:cf:54:c4:67:5a:be:af:70:
49:18:60:99:05:39:72:ff:89:ef:e9:4e:79:66:4b:1e:2b:3f:
e7:bd:34:10:0d:8e:8d:58:ce:57:4c:09:09:bb:2f:7f:be:15:
4b:29:ca:a9:fd:67:f1:50:5c:3a:c2:6a:6e:9f:61:c1:7c:76:
38:83:b6:63:14:9f:63:da:80:e9:c7:fe:a9:8d:31:e2:c7:38:
55:68:53:98:14:e2:63:64:9f:64:72:2c:38:7c:46:e3:94:36:
e2:29:56:3c:f5:6f:a4:c0:de:7b:7a:79:b3:12:af:16:7e:67:
77:b2:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:26 2025 by rpki-client