Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce171f1-d5a0-32d1-a2cf-f0ce9e1149c4.roa
File: 1ce171f1-d5a0-32d1-a2cf-f0ce9e1149c4.roa (raw, json)
Hash identifier: Yx3VandnwVQtra72PQ5CiUFXFgqdAzeDVIoruiLBfe4=
Subject key identifier: 6A:60:77:02:1C:09:54:55:1E:90:ED:D3:44:1A:30:A0:EE:7E:19:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E969A79F4394760686E29A380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce171f1-d5a0-32d1-a2cf-f0ce9e1149c4.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:9a:79:f4:39:47:60:68:6e:29:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=c822d888-4a25-45c5-9bbb-45b9d3860c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:73:c2:de:d2:93:47:7d:c1:51:13:c2:bf:
e0:61:8d:ae:9f:f8:ce:7e:db:37:de:90:d2:38:d6:
6e:49:50:5e:90:1a:f0:d8:83:4f:4d:e3:ca:c9:fb:
ae:75:5a:53:0f:e3:c5:42:76:14:0a:27:dd:c9:ff:
31:68:fb:2f:7c:02:c6:de:14:2e:54:1b:f1:62:4c:
8d:07:0d:d9:66:42:11:ca:3a:9f:6b:43:31:46:0e:
62:2d:5a:be:b2:b0:2d:6f:89:f0:eb:a4:8a:4b:72:
cd:a8:0e:d1:78:53:87:44:75:28:c5:2c:c2:2b:3e:
8a:83:b7:16:69:5e:b3:36:ea:4a:06:7e:7e:26:af:
68:02:5a:78:bb:3f:11:51:1d:5d:a4:1a:13:6c:da:
66:c4:f3:d9:3c:32:3c:a1:61:47:83:4a:86:ed:71:
b5:b6:29:d8:79:ed:00:c8:53:f3:c6:02:83:54:a5:
df:34:f7:17:54:2a:ac:62:a9:2d:e7:00:41:ee:03:
cf:c5:1d:9e:00:0a:3f:69:4a:49:72:26:53:2c:c3:
a9:b9:e1:4b:61:34:51:c6:b5:47:cc:bf:52:80:1b:
74:ed:3e:08:bc:3f:dc:4c:4d:50:4f:d1:c6:a1:57:
a3:98:fc:10:fc:38:ac:53:c7:a0:54:af:9d:7d:ef:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:77:02:1C:09:54:55:1E:90:ED:D3:44:1A:30:A0:EE:7E:19:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce171f1-d5a0-32d1-a2cf-f0ce9e1149c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.244.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ba:34:a7:52:a7:02:61:9b:79:1b:b0:83:65:32:2d:3e:2d:
9a:04:d0:c7:77:52:ff:a1:d3:ad:c9:3b:7c:f2:62:91:4a:44:
58:6b:e9:73:62:4d:f5:34:6b:47:0d:dd:a7:6f:0b:9f:02:33:
0b:d7:08:24:05:63:23:96:4f:64:70:73:65:4e:cc:2b:39:b4:
23:7c:7f:a8:b1:4c:b1:8d:a7:78:9b:64:32:06:1b:db:ec:61:
49:fc:08:5c:f3:56:2c:40:b1:36:c9:a1:f6:03:23:ee:9f:74:
05:57:9d:75:d5:f0:91:d4:28:d2:ef:e9:1e:db:bf:f2:a1:11:
74:5d:a4:f7:1e:bc:d7:6c:bd:91:9e:b6:68:ac:83:8f:06:18:
de:b2:b0:13:a7:5b:49:cf:6a:53:a5:e7:b5:fd:32:31:7c:00:
31:c7:9a:c8:24:23:9e:9b:ae:77:b0:6c:af:a8:46:35:12:2f:
08:1f:df:50:ec:dc:53:77:c2:9b:85:a3:89:0d:23:d4:21:4a:
76:b9:e6:ed:11:be:46:a9:30:37:3a:30:6b:7c:27:ba:b5:54:
aa:0d:c0:25:a9:d0:d6:aa:4e:1c:ab:8e:31:83:9d:8f:0c:a3:
31:be:98:d1:b5:72:9d:41:73:ce:df:a9:b6:e3:6c:a5:9b:b5:
b8:bf:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:03 2025 by rpki-client