Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1befe745-e0c4-3d44-a461-8138f5e33e59.roa
File: 1befe745-e0c4-3d44-a461-8138f5e33e59.roa (raw, json)
Hash identifier: QERoXYzvHWBWiz9gCTeDRzzsOKRaeNOC8xGcRbNkXNg=
Subject key identifier: 3D:B3:4A:10:89:37:0A:28:64:3A:5F:04:7A:0E:67:15:FA:A3:72:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB98ED0F7765908BFD1F96D20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1befe745-e0c4-3d44-a461-8138f5e33e59.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.140.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:8e:d0:f7:76:59:08:bf:d1:f9:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=c11b0b6b-9045-475b-8758-7e75f66e0086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a6:84:e5:a8:90:c2:ed:46:06:82:59:2b:94:
fb:17:5d:85:09:ab:cd:bb:2e:f9:b9:7a:e8:cf:10:
98:a9:c9:5e:6c:08:0f:16:5a:35:4b:51:26:f0:18:
31:4a:7b:31:93:c3:07:b6:99:5f:05:e7:76:e7:45:
15:77:49:c2:18:16:ab:74:78:80:b0:24:7a:b7:b8:
de:e2:e9:0e:f9:6f:41:05:eb:ad:37:e0:64:f8:46:
d6:ae:29:bb:1c:70:44:06:ac:eb:6f:de:8f:38:a2:
08:0e:6c:54:36:15:70:f5:50:ea:0b:2d:9f:f1:10:
37:c3:1d:ce:a5:a8:2f:de:8f:2d:43:da:eb:c0:4d:
2f:a7:62:47:ff:fc:a2:61:a3:bf:42:ef:46:a6:d7:
b8:97:2d:bd:b1:b0:51:8e:22:ab:06:02:69:a9:4b:
e0:e0:47:54:db:26:37:ed:10:6c:da:0b:67:42:5b:
73:05:4b:15:a6:63:c1:1a:da:55:a8:fb:48:80:ff:
d0:3d:38:cc:15:7e:47:84:49:f4:f9:c6:42:f4:00:
73:f3:50:cb:28:de:0e:19:d5:04:9b:04:d7:6a:46:
dc:09:71:41:85:5f:3d:69:cc:58:6d:ee:fe:f5:96:
7c:a4:ad:46:d8:1b:59:a2:19:14:f0:44:7c:e6:8e:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:4A:10:89:37:0A:28:64:3A:5F:04:7A:0E:67:15:FA:A3:72:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1befe745-e0c4-3d44-a461-8138f5e33e59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:dc:59:7a:92:43:7b:be:42:cb:e3:fb:a0:28:5a:35:5c:83:
e1:22:ba:00:6d:e7:a2:d1:11:fc:c1:1f:73:a9:c1:f2:5d:7f:
08:26:dc:87:4a:3f:f8:2c:b1:d0:19:a4:39:d4:5b:56:d1:b0:
6e:9c:07:b0:9f:4f:6f:fe:7a:16:0a:19:9b:7d:71:7d:52:be:
c7:d5:ae:3a:9c:bc:36:19:6b:90:da:3e:2a:ac:6c:e8:e3:5d:
17:ae:40:e7:45:1f:8b:46:cc:c9:ad:d4:28:0e:8d:1d:a1:03:
22:c1:3f:83:6f:e4:39:1d:b0:3b:5e:c9:22:ad:17:62:b2:7e:
4e:cc:fb:79:fe:2e:b8:a1:f4:4a:e1:10:2a:7b:36:e8:81:7d:
d7:12:f3:75:c0:ca:c8:b7:23:df:35:76:03:de:11:58:ca:12:
f4:aa:2a:c9:10:ec:21:36:af:dd:cb:07:23:ba:e6:4b:aa:fb:
b7:97:d9:b5:4b:9b:48:e9:9c:33:27:9f:8b:2c:77:70:99:c6:
e7:2a:fa:13:38:ff:99:29:d0:48:c6:86:de:05:e9:a9:be:3c:
39:b5:b8:4d:69:d7:8d:5b:7c:50:b7:8b:35:f4:d2:85:cd:5d:
63:06:8a:64:d3:9f:5c:18:5e:f3:68:98:54:76:88:e9:d9:1d:
3d:b7:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:21 2025 by rpki-client