Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/294baa2d-e348-3d61-8806-f578329c7cde.roa
File: 294baa2d-e348-3d61-8806-f578329c7cde.roa (raw, json)
Hash identifier: 3ckSZzo0QEGGsQLL3lrlh09gl5p456mEXjJmD7lkfZg=
Subject key identifier: A4:F3:B9:E4:62:80:8D:D9:09:5C:3F:72:F3:14:18:44:D3:33:B7:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9616AAA8623D2DC269436780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/294baa2d-e348-3d61-8806-f578329c7cde.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:16:aa:a8:62:3d:2d:c2:69:43:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=4296be93-faaf-40dd-9cc3-18f3ee5c850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:cd:05:aa:83:6c:d8:71:85:4b:62:23:64:
86:ec:48:1c:70:7b:ec:6f:56:2e:2d:4d:55:21:77:
48:98:5c:0b:62:bc:2a:e5:ba:07:3a:2c:05:a7:b2:
37:69:a0:ad:2c:e7:59:b3:d5:db:8a:39:99:87:34:
19:1b:97:19:dd:e1:92:c7:d5:40:48:4d:dc:47:ea:
f6:eb:d6:8c:76:fc:9f:6e:44:ae:78:a6:7c:01:e6:
f6:1e:12:35:d3:1a:81:46:23:4f:fd:18:59:11:94:
33:12:b1:b3:8b:a2:29:dc:35:73:70:4c:a0:1e:2f:
13:9b:37:af:f7:22:f7:45:46:2a:b3:3d:f5:84:af:
5c:03:03:59:6d:a4:d7:ae:88:1a:47:b7:cc:16:89:
fd:d2:45:e5:e8:70:3a:3c:75:28:f1:a9:66:9b:c8:
9e:8d:b2:a6:84:c6:46:75:64:e6:20:8f:55:73:3a:
12:03:d2:be:de:f3:5f:cf:01:45:61:db:dc:da:11:
84:7c:c0:13:2f:da:a7:e3:5a:96:7c:17:b5:b3:b7:
9b:a4:ee:60:65:54:e2:51:d2:c4:c7:fa:a2:8a:35:
04:8a:a6:e3:b7:92:a2:c6:ba:37:98:75:4d:73:37:
1f:c3:2e:1b:5b:62:4f:e9:29:35:54:8f:76:4b:90:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:B9:E4:62:80:8D:D9:09:5C:3F:72:F3:14:18:44:D3:33:B7:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/294baa2d-e348-3d61-8806-f578329c7cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.172.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b8:0c:e4:97:d0:88:6c:47:db:90:61:9f:d6:06:bc:ae:f3:
16:71:70:46:ec:32:2b:1a:da:74:9b:e9:ee:26:8f:11:ef:1d:
0f:bb:3f:ff:87:88:1c:3c:fc:c9:69:48:c9:4c:a7:ce:08:a0:
52:5e:f8:27:0b:a8:1b:23:7d:79:15:c0:b3:4f:81:85:fd:e5:
89:53:bd:5f:c4:bb:e6:c7:90:c0:38:d6:63:e0:a3:47:cd:be:
52:2e:d7:74:85:46:bd:2a:0d:89:36:24:d9:7e:e7:fd:39:91:
f8:c6:49:cf:2b:76:cf:05:e1:09:10:73:9b:f2:64:cf:8c:2c:
ae:e7:c8:99:96:60:c4:e8:cd:b5:6d:b8:c2:8c:f4:8b:32:e7:
44:a1:03:74:e5:1e:f8:9c:4d:f1:f4:c6:b3:67:3b:d2:ac:7c:
9a:18:f0:b7:57:fd:19:1a:74:bf:5f:26:47:a3:62:a9:83:3b:
c8:23:f0:e2:f8:99:1a:13:cf:f7:61:82:53:6e:b8:f5:33:27:
26:01:73:1f:80:63:86:96:ff:a3:dd:77:ed:ed:81:d1:ef:97:
ee:05:3d:85:08:fa:a5:73:35:65:13:31:d5:f7:86:86:e1:b1:
b6:14:8a:d1:18:88:e0:2b:67:3e:91:75:d0:3a:c1:e0:dd:08:
92:2f:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:35 2025 by rpki-client