Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fce776d-e49e-3d3b-827c-bded21e12732.roa
File: 1fce776d-e49e-3d3b-827c-bded21e12732.roa (raw, json)
Hash identifier: HCugVQ6QXJogZE4ywDAjT3+ccBkaceg6sK03T94HYIo=
Subject key identifier: 79:BA:7D:5B:A9:3D:E8:50:3C:4D:3D:2F:5E:32:16:D1:D1:F3:BC:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD2CD07A35E1868EEA833C60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fce776d-e49e-3d3b-827c-bded21e12732.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:2c:d0:7a:35:e1:86:8e:ea:83:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=126fb1f2-241a-4950-aeaa-b105d7ff1e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:ea:45:63:0e:cc:fd:e7:e4:64:ee:e1:15:
46:d3:4f:27:a3:4e:a2:0a:68:ae:ae:a1:b4:87:56:
e7:86:5c:f1:a3:54:27:fc:bc:50:70:78:5b:45:b8:
ca:4f:48:1b:0b:83:1a:59:a5:94:cc:19:7e:93:1b:
ab:eb:aa:10:c8:f0:ea:86:0f:34:b0:45:0a:a7:97:
e5:d0:e7:ba:9a:1f:d0:0b:20:9b:ac:5a:e0:2f:a3:
b0:b7:90:a1:2e:e5:9b:12:8c:9a:e1:ac:28:7a:61:
c5:a4:66:a6:1c:a5:ab:fc:8a:a6:c2:58:9e:fa:ae:
25:29:4c:68:9e:db:70:ba:95:6f:17:f6:af:f9:56:
06:f5:02:77:0e:4e:16:74:55:44:eb:f6:64:4f:a8:
5b:3d:32:04:9b:48:3f:16:2f:ff:05:7d:c5:24:d2:
9d:dc:80:3c:f5:65:67:18:c2:29:a2:b0:32:17:69:
0b:dd:a1:0b:92:0f:2e:19:5e:d5:14:b0:73:3b:6d:
a3:dc:5e:f5:1e:59:9a:c9:1a:3d:e1:03:4b:ae:1a:
28:af:da:6c:d3:3b:7b:18:82:07:9e:e9:17:93:ec:
dc:a0:99:80:ad:b5:e1:b3:db:42:bc:5d:94:82:9f:
42:61:c4:f8:b9:02:03:72:6f:2b:0a:e0:b8:d1:b8:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:7D:5B:A9:3D:E8:50:3C:4D:3D:2F:5E:32:16:D1:D1:F3:BC:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fce776d-e49e-3d3b-827c-bded21e12732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c9:b7:47:db:c9:a9:07:b3:ba:68:eb:3a:ce:5f:8e:74:c1:
9c:0e:cc:2e:29:4e:9e:33:dc:e5:ee:02:03:a1:2f:7f:11:83:
53:c4:82:5a:35:42:c5:e4:c8:b8:70:20:5f:b7:db:9c:cd:21:
5a:ef:c0:1a:ee:d1:f8:8a:cb:12:ea:f9:8c:63:e2:64:04:1a:
9b:68:2b:83:8d:c8:9e:70:67:f6:54:ea:b9:65:b4:64:a1:5c:
e5:c4:90:ee:a5:6a:b6:07:60:88:6f:f5:df:8d:89:f9:f2:2b:
e3:9c:a2:72:df:b2:62:8e:88:50:da:22:0c:36:f8:cc:1a:11:
2c:21:56:2a:0f:cc:11:3c:e9:90:9a:f6:7b:8d:dd:21:ca:8a:
91:f9:84:b7:b0:5d:77:42:e1:a0:a0:d2:6f:7d:24:b8:8d:f5:
13:64:c7:03:df:26:26:15:72:6d:5d:fd:28:82:87:18:1f:05:
cf:8f:57:a5:08:61:06:8b:48:50:53:21:64:89:cb:79:4e:0f:
12:db:23:45:d4:4f:b3:ad:df:3c:f1:5d:ae:df:7f:91:80:31:
10:a5:22:c2:ec:86:69:33:1d:b3:9b:4d:3d:75:12:e8:3f:67:
ea:d8:c1:96:5f:fb:89:83:ab:db:1b:b6:b6:01:c4:26:43:bf:
66:fb:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:57 2025 by rpki-client