Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cb3bafb-a7f1-32ac-9636-324344936481.roa
File: 1cb3bafb-a7f1-32ac-9636-324344936481.roa (raw, json)
Hash identifier: zMbkhecFOsK/z4wshVacT8vTV0zsWxseU0YqhoWnc+k=
Subject key identifier: 66:58:99:B6:03:DE:14:45:19:CE:DF:40:68:2F:43:D2:D7:C9:B2:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B234B640950F70EEF548A50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cb3bafb-a7f1-32ac-9636-324344936481.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:23:4b:64:09:50:f7:0e:ef:54:8a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=c0eaeca9-0c77-4f56-b988-bc62a62a7d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:8e:47:67:27:fa:33:be:b1:b5:83:23:45:
8c:d7:c4:4f:fe:25:44:86:2a:a7:bf:1c:11:44:7c:
e0:eb:02:b9:a2:43:cf:4d:76:ef:4c:c7:c1:8e:40:
3d:05:f1:32:69:f0:d2:ab:73:bc:93:35:8a:b2:bb:
6e:f2:2d:bb:4d:cc:a7:99:54:15:f8:85:52:f2:d3:
49:ca:23:29:db:b6:a6:83:4a:28:fc:1c:17:68:ef:
c9:76:92:c5:61:a8:d9:66:66:7b:d0:95:00:eb:0d:
89:8f:21:dd:ea:17:e1:96:d4:1f:5c:45:c0:4c:56:
0a:cc:81:94:6b:50:9b:bb:3b:3a:c3:9c:fa:76:31:
41:a2:79:58:4a:ea:8a:c3:ef:4a:3d:93:76:ec:59:
ea:66:45:5d:ee:bc:d7:58:fa:22:20:3a:f3:e7:59:
29:9f:93:08:bc:24:89:c9:9b:46:a8:f6:c8:f6:4e:
9f:3e:f3:75:69:38:43:09:55:55:9f:1d:bf:32:44:
67:9a:e2:27:31:b6:fa:4a:95:27:fd:72:1c:e6:8a:
6c:2a:fc:9f:1e:30:fe:f3:98:b6:b2:47:de:b4:47:
0d:35:07:de:3d:95:fc:c5:ea:94:5f:63:1f:cb:c9:
de:49:69:a5:4c:cf:df:a1:98:16:31:0f:8a:33:aa:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:99:B6:03:DE:14:45:19:CE:DF:40:68:2F:43:D2:D7:C9:B2:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cb3bafb-a7f1-32ac-9636-324344936481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d8:ab:a5:d7:8d:4d:0c:21:dc:2e:ed:68:fa:ee:99:a9:ac:
60:8e:3f:1c:0f:53:4d:83:9d:1c:21:1e:6f:98:91:3e:2e:41:
84:4d:4a:99:98:71:ca:93:43:aa:dc:76:39:8a:f2:6f:f6:15:
b6:29:de:64:e1:09:c3:4f:d5:56:65:c9:0f:36:ce:45:ee:b1:
bc:13:99:23:33:c6:37:c6:2a:96:06:d4:71:ca:d5:d9:81:cd:
6b:99:1d:6e:65:a5:b2:2b:ee:11:e8:66:f8:fe:e7:a8:13:aa:
cd:0b:cb:79:76:5e:8d:d7:d6:70:9b:43:2b:eb:e4:fe:4b:02:
65:40:cc:a8:67:d2:34:8a:6f:97:85:63:95:36:6b:d6:58:ab:
97:63:75:4f:41:bc:a7:34:d9:66:78:5b:7f:5c:85:68:d6:d0:
2e:17:3e:05:8e:36:82:9e:36:30:6d:c3:e7:13:f4:f8:f5:5d:
2f:f8:30:a5:f0:40:08:33:e3:69:af:ac:d3:88:f3:98:94:14:
91:d1:52:35:66:b1:ba:39:bb:b2:91:2c:6d:76:fd:3e:e5:40:
bc:aa:c4:0b:45:5c:93:41:63:69:8c:58:b4:09:08:e1:6a:97:
5a:e0:7a:d0:09:4c:f0:56:ca:b8:f7:ed:46:ac:c4:b9:5b:79:
ec:f1:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:48 2025 by rpki-client