Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bf5522b-ba7b-36ef-a6e6-ea72defc1ba9.roa
File: 1bf5522b-ba7b-36ef-a6e6-ea72defc1ba9.roa (raw, json)
Hash identifier: yadfut5rEgeJJ8sGO1fWBoNIJL3oZP37xuY6zjBIKLU=
Subject key identifier: 26:A4:28:22:1A:C8:27:12:84:97:FE:C0:71:7F:49:6D:FD:89:70:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5E8002353253E4AE8E7B600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bf5522b-ba7b-36ef-a6e6-ea72defc1ba9.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:e8:00:23:53:25:3e:4a:e8:e7:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=5d02fa75-628c-4bed-8eaa-4d35b762e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:1c:d8:78:82:3f:d5:c6:2e:2d:53:c2:f3:
6f:ce:1c:5f:c4:5e:10:ef:0e:fc:e6:a6:bc:12:50:
b5:69:b6:d9:06:66:6f:17:6e:48:2f:21:4f:9a:90:
7a:09:da:f8:73:d5:e9:b1:89:51:ee:ea:46:d8:65:
96:be:09:e0:68:1d:b4:75:30:a1:b7:cf:9b:3e:51:
bc:c3:1a:b8:c2:58:f9:a5:61:5f:4e:de:dc:d5:ea:
65:60:da:d7:83:97:ab:51:77:24:5c:95:5b:06:a3:
d9:ab:86:b1:f2:1c:87:1d:b4:93:62:3e:61:cd:13:
08:ee:6c:f8:fe:8e:86:d5:5f:2b:3c:88:cb:12:a4:
e9:1a:50:c4:df:d5:76:2a:65:c5:50:70:15:0f:90:
17:c0:ed:b0:87:f6:d1:df:34:09:8a:48:0d:2d:e8:
93:6b:9e:38:49:17:6e:b0:21:6a:0f:5d:a1:0d:0c:
81:b4:35:14:59:fd:86:2b:2f:f9:da:90:f2:55:3c:
8c:2c:69:65:89:9f:b5:4e:7f:80:f5:59:23:a7:ca:
73:4d:91:b6:8c:77:64:7f:8e:59:78:a4:9a:ee:21:
8e:84:df:b3:46:ca:f5:47:70:96:c7:99:9e:1e:62:
ff:68:47:cc:74:f7:fc:d5:dd:f2:a2:b2:ba:21:10:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:28:22:1A:C8:27:12:84:97:FE:C0:71:7F:49:6D:FD:89:70:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bf5522b-ba7b-36ef-a6e6-ea72defc1ba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:05:2d:3d:45:d2:b1:c4:27:d9:56:23:d7:a3:86:7e:42:47:
95:a8:b1:97:58:7f:aa:62:9e:69:6b:b4:0c:b2:eb:30:45:d7:
fd:05:e7:04:64:c0:02:17:e6:f9:81:24:da:2b:66:34:c5:7d:
c9:ce:ac:4e:19:eb:d0:83:95:c7:2a:69:f3:61:8b:10:92:a8:
39:d4:bc:d3:bb:7b:bc:ba:03:e1:18:54:8f:a1:d6:1e:9d:bb:
b3:bd:ef:32:7e:f9:a6:45:57:8a:e2:e1:05:69:c9:de:1e:37:
cf:e9:ae:78:43:59:77:29:8f:be:e8:ec:de:74:a1:aa:81:35:
f5:aa:57:0a:a1:64:d0:10:d9:bb:6b:9c:69:dc:c9:db:b5:fc:
f7:cb:c3:e4:01:f1:03:4d:f0:da:e8:ba:e6:a2:9f:17:ce:3c:
92:52:68:83:b5:23:95:b6:4f:15:7a:88:f2:19:47:e6:1e:bb:
37:8e:e2:7d:96:79:23:34:3a:ce:c6:07:4d:a9:6f:a3:3e:77:
af:91:24:db:25:43:2c:2f:03:58:4f:05:ee:41:29:4d:e9:b4:
db:d5:df:5d:e2:2c:03:a5:b0:f9:e8:21:9d:d0:ee:59:6b:a6:
cc:44:49:4b:16:04:49:11:dc:aa:c5:90:87:c7:10:11:86:c9:
21:bf:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:15 2025 by rpki-client