Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e0b31fc-ad80-3956-8fb8-03929ecbe490.roa
File: 1e0b31fc-ad80-3956-8fb8-03929ecbe490.roa (raw, json)
Hash identifier: J5wRSh6OfKtzLgfpjdftF8RQiglZpOO71G79hWAuYrg=
Subject key identifier: F3:E4:0D:DC:F3:E6:BE:BC:27:AB:B0:F4:5A:22:24:A4:F5:E1:F9:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE450986DC8AD84BC6E84BD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e0b31fc-ad80-3956-8fb8-03929ecbe490.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:50:98:6d:c8:ad:84:bc:6e:84:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=3e7f37cb-bea6-4136-b144-ebbbf33eee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:91:1b:13:65:a1:86:32:40:93:a0:22:e2:
db:2e:b6:4e:da:a0:c4:1a:60:3a:3a:85:ef:eb:eb:
f4:eb:1c:6a:e7:7f:55:3f:68:d6:c8:da:db:78:d4:
a0:24:40:c8:46:6b:04:f8:fd:30:7a:e9:c1:77:cc:
26:41:62:21:84:4e:96:75:17:df:8f:6f:9a:b8:a8:
ad:5a:c7:20:fb:f0:04:99:a2:27:1e:6d:e3:19:42:
31:59:a7:7e:8c:3c:38:fd:56:3f:31:1e:09:58:98:
66:fe:df:69:3e:e5:10:8c:2b:4b:5f:cf:1d:5a:f2:
d0:1b:58:87:65:16:4c:88:fd:36:1e:17:dc:c7:3e:
64:29:af:43:36:28:39:6d:ae:ac:11:62:1e:c7:ce:
f8:1c:58:df:12:0d:0d:6c:12:2c:a5:e8:24:e4:98:
d9:15:8d:fa:ab:cb:b3:e8:0f:cf:f1:bb:36:ce:6c:
a7:70:23:f1:32:41:15:cf:c9:a2:d1:88:08:f9:65:
00:9b:5d:0c:d5:c5:c9:0e:f0:0e:2a:ad:98:88:70:
2f:c7:5a:95:6e:0d:f6:9b:0c:ef:16:b8:45:26:78:
63:62:eb:c4:ca:6e:fc:e8:f6:d3:d9:78:5d:b9:01:
eb:21:44:fc:cc:48:09:3c:c3:af:01:bb:8e:23:f7:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:0D:DC:F3:E6:BE:BC:27:AB:B0:F4:5A:22:24:A4:F5:E1:F9:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e0b31fc-ad80-3956-8fb8-03929ecbe490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.172.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b0:e6:13:8e:3c:1d:89:b8:3a:e5:40:d3:a0:7c:e7:ad:fa:
e9:a2:cf:5c:90:39:ab:1b:5a:35:b9:57:13:86:3c:ad:40:05:
5d:d5:4c:2d:5a:5a:a0:bb:b0:5b:9e:16:ca:75:c3:e4:d4:02:
b2:83:8c:2c:25:18:b0:7a:92:05:c0:a2:c7:df:1f:cc:ac:63:
03:1e:cf:8e:1b:da:2d:d2:ad:db:5c:c6:d3:83:b5:3c:dc:4b:
39:70:f7:d3:80:03:56:c0:a7:a4:c8:28:e7:29:5c:bc:ae:3f:
1f:39:7a:de:d8:85:1a:56:1f:46:ac:76:d7:1e:80:bc:71:47:
45:f2:75:1f:19:56:1c:7b:79:20:86:a4:f2:d8:cd:c1:6f:6e:
a5:38:16:7f:12:35:61:42:75:1c:2a:07:52:f4:d0:20:20:9c:
81:f0:8e:1d:18:59:ac:96:e6:8a:5a:ce:d2:aa:84:25:a0:02:
07:17:b1:0f:da:4a:df:ed:40:a7:bc:c5:2e:2e:fd:e5:8e:d9:
cf:54:9c:16:7c:85:65:9f:ed:85:92:c1:a5:21:52:00:ce:43:
44:2c:75:62:77:2b:78:81:f1:0d:49:ce:ce:0e:2b:bd:c0:07:
e1:fc:8b:66:89:7f:73:48:2e:35:2e:2a:29:ed:55:07:eb:dd:
44:29:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:35 2025 by rpki-client