Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2129316c-5b45-3c44-9c87-e9e264acea92.roa
File: 2129316c-5b45-3c44-9c87-e9e264acea92.roa (raw, json)
Hash identifier: MXpnaILcr9t+1JqYHIcitJPxQK25agRNs/2YykYsfOY=
Subject key identifier: 19:F5:F8:91:8B:71:38:F3:47:78:5F:C7:A5:FB:F5:DB:D6:F7:9B:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326CF2C9D0241AC801C54380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2129316c-5b45-3c44-9c87-e9e264acea92.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:6c:f2:c9:d0:24:1a:c8:01:c5:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c9ff297d-c754-4075-89d5-71c85255f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:e6:34:a1:e7:cd:f5:db:a3:f5:54:c0:af:
3b:54:26:87:d2:85:72:0f:95:f1:5b:be:94:22:c6:
73:bb:ae:de:2f:c6:2e:53:14:f3:eb:ec:dc:6f:de:
ba:a8:7f:a3:ad:72:79:be:5f:74:d3:b1:cd:20:28:
1f:1e:d9:ce:6c:ce:83:06:e6:46:b7:e1:cd:b1:b6:
2a:e2:a8:20:14:e0:46:01:8b:5d:c1:45:54:e8:79:
31:d7:87:a2:01:56:88:42:84:91:51:a2:10:d5:62:
ae:a8:43:5b:cb:13:1e:d6:0c:bc:7b:a9:8d:f6:29:
60:29:36:c9:8d:56:65:5c:dd:92:06:08:e0:d7:bc:
aa:6b:b0:34:d2:3d:9a:6d:47:4a:6f:eb:66:4a:62:
a5:3b:a3:3f:2d:11:71:cb:dc:f7:d0:ff:57:83:cc:
f3:3a:3b:18:b4:68:9a:8a:1f:3c:d6:7c:73:2f:95:
5d:3c:98:18:87:5e:37:2d:48:a6:c5:c9:cf:67:2c:
47:54:15:60:5c:8e:20:bd:47:0f:8d:ff:1a:89:17:
c2:9a:cc:72:ba:89:ed:73:ce:4b:f5:dd:7a:41:c9:
6f:21:a2:2c:96:c2:39:1a:31:2a:b3:7b:e0:e2:c1:
55:c1:34:e7:f4:03:03:76:8d:f0:23:aa:d5:9a:49:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:F8:91:8B:71:38:F3:47:78:5F:C7:A5:FB:F5:DB:D6:F7:9B:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2129316c-5b45-3c44-9c87-e9e264acea92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:43:d9:ab:2f:c1:67:5c:1a:ba:bf:80:1e:e9:44:08:04:16:
e1:3b:e6:92:10:a0:56:7b:3d:df:88:4d:03:fd:9b:44:f4:0f:
9d:03:2e:34:9c:d1:b3:e7:6c:96:c9:e2:6e:fd:d3:84:e5:3c:
6a:af:de:9b:cc:b1:9c:3e:dc:7d:80:de:32:ec:9d:58:f7:45:
38:0f:37:bc:fd:4f:d9:08:7d:75:77:a1:2a:0d:bb:16:d3:cc:
8c:a6:d6:98:f3:cb:5c:c7:f8:6e:d4:a9:cc:41:cf:fc:90:6b:
fd:b5:44:f0:01:2d:09:54:9d:ee:b7:8b:89:66:71:70:30:ea:
a5:c4:11:fc:70:f2:37:d6:7a:97:d1:68:c6:1e:b0:99:ae:8e:
07:5e:8a:c1:ca:a9:17:57:c1:0c:84:ca:0d:91:8a:55:2a:1c:
ea:ce:a1:a7:02:25:77:3a:3a:d6:07:02:3e:e7:35:fb:7b:94:
2c:76:05:07:79:a3:cf:15:37:9f:45:c4:b5:28:2d:56:d3:b6:
60:35:ca:12:fb:9d:a5:47:3b:76:6d:1e:83:e9:3d:7f:46:b9:
57:d2:24:23:2d:fa:e0:60:a5:dd:3c:e8:82:45:b8:4e:84:f9:
90:7d:6a:30:16:cf:6a:0b:3b:20:81:80:35:7b:3b:89:ec:c4:
2e:90:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:22 2025 by rpki-client