Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21bc78d3-61f9-3aa9-9b60-875f785352ec.roa
File: 21bc78d3-61f9-3aa9-9b60-875f785352ec.roa (raw, json)
Hash identifier: 2pFGgbEUm2zbd9gia0I5bSgg55Sjp8gr8f4KSsfVhXA=
Subject key identifier: 18:AF:41:42:9C:2C:85:48:7E:C6:EF:15:4B:8A:11:61:B3:96:F5:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32FF8349445721D31247C100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21bc78d3-61f9-3aa9-9b60-875f785352ec.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:ff:83:49:44:57:21:d3:12:47:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=a7b72f2e-88bb-4767-92ed-992b360ca92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:eb:09:c8:da:c1:7e:6f:74:a1:ab:bc:26:
3f:0b:c4:0e:7f:59:00:40:ce:7e:1f:c2:f6:c0:a4:
8e:73:6e:dd:8a:68:1c:3b:b7:96:b4:fb:24:f9:be:
dd:05:02:d5:bf:06:de:62:0f:0d:7b:86:ab:2a:f2:
f3:b4:cf:5f:c3:04:99:6a:a9:fc:cc:ec:cc:24:8a:
06:e4:ee:28:b1:80:4d:ba:0e:f2:f7:fc:98:42:f0:
a6:15:77:6d:fb:7f:9f:c5:bb:31:e6:ec:4e:c5:64:
90:28:1f:13:02:53:10:c3:4e:25:27:ca:0a:6e:5e:
97:31:b1:69:d3:50:dd:58:b7:be:a6:20:e4:e4:f5:
2a:20:19:1d:90:92:37:40:91:a1:33:95:bd:c3:af:
ed:7c:04:3e:6e:52:f3:0a:a8:7c:c6:3c:50:3c:37:
1c:6d:ee:48:bc:c0:61:be:dc:ed:76:35:a8:e7:17:
de:39:97:6e:31:f8:93:f6:32:00:6a:4f:11:2e:f9:
1b:cd:10:dc:42:81:b5:3e:b9:52:d2:a5:1b:07:c2:
99:6f:25:59:d4:29:d8:bd:1f:db:68:02:74:9d:05:
e0:68:90:15:df:98:f1:c1:e6:c1:6c:55:cd:2e:26:
23:b5:27:be:77:da:f6:69:88:65:85:80:f9:76:c2:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:41:42:9C:2C:85:48:7E:C6:EF:15:4B:8A:11:61:B3:96:F5:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21bc78d3-61f9-3aa9-9b60-875f785352ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:06:f6:5e:fd:4f:e2:82:b6:af:e3:a7:c9:e4:12:4f:5a:45:
bf:98:86:23:82:90:36:0d:3c:6e:2c:4d:30:21:3b:38:e3:c6:
e2:cf:b8:f9:b7:4a:4c:5f:5e:ae:13:bd:23:f4:57:07:3c:f4:
81:d0:3a:db:b3:8b:06:5a:93:75:44:a8:2d:05:33:58:41:4e:
0b:6f:39:c3:7f:55:89:93:52:8f:fa:25:96:47:10:d2:1b:b1:
47:72:e4:ff:58:9f:34:b2:69:2a:65:66:e2:40:d8:18:0c:ea:
35:cb:6d:e2:24:a7:99:1a:a5:ab:2c:29:a3:f7:63:98:b5:6a:
6d:1d:f1:0d:29:8e:40:91:58:aa:e2:ac:31:59:5b:4d:55:6d:
1d:85:be:65:32:59:51:cb:c6:3c:60:73:ee:82:92:ed:61:f5:
fb:55:b0:2d:42:4f:d6:f6:fb:09:ff:51:89:11:82:5d:1f:da:
f3:82:5f:2d:29:ac:bc:b4:90:94:a9:8c:51:ba:95:9b:cd:17:
2c:18:c6:e0:9b:7e:9b:fc:4c:2c:be:cc:6f:61:78:35:59:f9:
89:7c:a7:3d:44:e3:1a:14:ad:8d:ce:4f:a3:ad:dc:f1:c3:77:
40:f4:b8:f1:3a:00:f6:00:a3:9c:33:b7:68:be:67:f7:dc:12:
77:f1:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:32 2025 by rpki-client