Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cad28da-68a3-34d9-9d56-88a7f400fe8c.roa
File: 1cad28da-68a3-34d9-9d56-88a7f400fe8c.roa (raw, json)
Hash identifier: 5ui/kfC2HMvWTvpdGQK+jgLKJp+PU3OOxQW1aFYZ3M8=
Subject key identifier: B1:7B:1F:F3:F5:9E:8D:2E:AA:FE:AD:E4:E8:5A:01:E1:18:42:69:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32925AACF9E36568F838FEA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cad28da-68a3-34d9-9d56-88a7f400fe8c.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:92:5a:ac:f9:e3:65:68:f8:38:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=684c6306-568d-4068-8067-ed2e07c92a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:20:e7:b1:4e:61:16:04:ef:4a:b8:8d:cb:
f8:d9:41:c8:62:84:fd:a5:f5:ce:8a:72:43:e5:b6:
20:1a:c4:a0:99:ce:75:58:8c:0f:49:a7:93:0e:c1:
dd:0a:33:71:05:71:12:99:85:18:27:8a:4e:e3:56:
95:aa:69:90:16:1d:0b:43:69:5d:91:44:80:53:95:
33:ec:6e:ac:7f:48:ba:94:25:d2:9b:dc:57:31:ac:
29:88:35:5e:66:bd:8f:f3:44:08:93:73:57:1b:0e:
54:a7:4b:f1:61:fd:f6:82:ab:68:bd:23:83:17:4c:
bf:bd:8f:0d:bf:d1:b6:33:42:84:00:b0:a1:cc:6d:
c6:18:0a:66:ab:95:c0:29:a3:41:be:8e:7d:44:06:
1a:5f:26:f9:0e:e7:4b:e3:f2:b2:15:3c:f6:13:32:
c4:31:ca:cc:00:08:ef:e0:21:18:fc:25:a5:3b:7f:
e0:7f:59:f3:23:1e:3e:81:c2:bc:1f:c4:9e:fb:2c:
a7:5f:e0:a1:5c:fb:aa:bf:e8:87:f4:6e:b5:21:36:
d2:e1:1d:a3:33:5b:61:c8:7d:9e:f3:ef:37:f6:56:
d1:a3:f5:cf:03:f4:19:83:15:0e:43:af:be:53:69:
c2:8b:63:9f:ef:54:54:e4:4f:6b:b0:41:dc:7f:2a:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:1F:F3:F5:9E:8D:2E:AA:FE:AD:E4:E8:5A:01:E1:18:42:69:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cad28da-68a3-34d9-9d56-88a7f400fe8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:01:37:06:f5:56:45:f9:49:38:89:90:6e:a4:c2:19:59:ac:
f3:2e:41:55:87:34:e8:d0:a1:28:cf:cf:5f:7a:f2:cf:e3:ec:
de:dd:3a:d4:c9:cd:d5:20:b6:6e:98:ed:c1:f6:e8:4e:d5:cd:
37:12:5f:cf:c8:fd:87:47:a2:d8:f3:21:3a:62:63:c3:95:b3:
55:85:61:21:31:39:da:bf:ab:ed:cc:53:10:90:2d:71:a3:a8:
e3:0e:89:a9:4f:60:44:48:75:90:11:cf:ce:5d:11:30:05:0e:
d1:a7:fe:31:43:cc:91:8c:d6:04:69:0f:e2:76:c4:a4:b6:e5:
89:cb:47:7f:74:1f:1b:ee:b4:e4:42:b8:1d:db:2b:27:bc:58:
77:1f:10:8f:14:08:06:48:b3:49:52:3a:ad:97:2d:1b:8c:e8:
f4:08:6b:96:90:b3:53:3c:86:42:04:7d:1b:ca:5f:de:b8:87:
77:c1:b4:46:a8:c5:1f:1e:c8:73:bb:3f:ac:15:b3:de:f3:9a:
2e:56:50:ea:99:82:20:e7:eb:e3:f9:51:5c:52:d5:7b:63:da:
05:9e:9a:46:01:51:6a:3b:ad:64:21:7e:b5:93:a9:65:6b:bd:
a4:c6:36:74:07:91:90:f6:c7:97:80:92:a8:be:1d:cb:37:d3:
79:9a:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:07 2025 by rpki-client