Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29907cc5-13cf-3c5d-ae3e-3e2b993f4fb6.roa
File: 29907cc5-13cf-3c5d-ae3e-3e2b993f4fb6.roa (raw, json)
Hash identifier: gok+RN+hk3xBLBl1gxBttzO7Yz1kyawct7SUGhRraeY=
Subject key identifier: 31:1A:34:74:AE:94:D6:39:AA:4E:EF:B2:EE:07:12:F3:F7:5E:6C:39
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD163FA40C91D2ED6D9F0400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29907cc5-13cf-3c5d-ae3e-3e2b993f4fb6.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:16:3f:a4:0c:91:d2:ed:6d:9f:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=1a0854c5-575b-4e9b-bbda-08b7c976a1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:0a:05:af:9f:52:04:22:77:33:79:fb:21:
7e:ff:6d:c0:89:c2:db:90:5c:01:cd:c3:f6:08:64:
e0:4f:c1:df:92:54:81:72:eb:42:ee:5a:47:8e:bc:
07:0e:18:2b:0e:02:b0:9a:8b:7a:8f:e8:0a:55:e6:
92:ea:b8:55:ef:a2:e8:55:f5:ed:44:41:19:5d:13:
97:a0:3e:1b:78:3a:ed:ca:ea:93:c6:d2:21:a5:65:
65:bf:60:35:5b:b2:f1:a9:81:11:c8:17:df:b5:bd:
d4:8a:d9:54:91:de:44:92:a0:11:9d:36:d6:62:a1:
08:c6:b6:77:62:a8:ef:e4:63:f6:3e:77:a9:69:d0:
6a:90:f6:55:0b:46:91:de:9c:23:64:92:0d:a5:86:
42:d0:b7:3c:b3:0c:35:bc:c2:a0:0f:c1:11:dc:a7:
bd:5c:21:3a:94:76:56:56:86:aa:85:ea:b3:ac:d5:
c7:bf:51:f0:7e:f0:55:30:ea:6e:51:2e:2a:93:6c:
0d:2b:27:30:3d:2c:ca:0b:07:27:bc:f1:01:58:d3:
d1:7b:d8:3e:c1:6c:0d:8c:af:7e:c7:24:55:fd:57:
6f:cd:3a:ad:b5:d9:a9:23:ae:37:43:97:51:db:f8:
54:a4:4a:cc:1b:06:90:40:1c:4d:94:37:d9:8d:7b:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:34:74:AE:94:D6:39:AA:4E:EF:B2:EE:07:12:F3:F7:5E:6C:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29907cc5-13cf-3c5d-ae3e-3e2b993f4fb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:6c:7c:c0:92:26:f6:6d:68:cc:fd:39:b9:bb:5b:56:e6:7d:
78:64:98:92:a7:9a:22:d6:34:84:c0:35:24:40:ba:f4:45:d9:
a1:2f:35:f3:bb:82:ac:9d:11:a5:22:2b:f1:7c:2f:12:50:e8:
f7:11:b9:3d:49:9e:33:48:96:23:a1:8d:01:51:dd:88:97:1e:
dc:d7:48:dc:db:06:6a:7f:33:8e:54:40:42:69:50:00:62:12:
bc:f9:3d:a4:39:e6:ac:5f:65:b7:41:91:02:86:c5:01:ef:bb:
23:5c:1b:dc:28:ad:aa:46:71:c0:da:37:66:0b:8f:21:95:ce:
73:d3:8a:81:21:19:a6:e9:1d:99:4d:2f:58:c1:9f:35:39:be:
3a:05:05:9d:8e:85:94:3c:23:f3:c0:34:6c:11:c9:a8:10:ba:
1e:41:c4:a2:0e:48:38:cc:3d:aa:ef:78:85:00:de:38:39:f1:
9f:e8:73:54:09:41:fa:49:3c:be:63:3e:ce:85:b3:c9:19:b7:
f3:55:c7:53:61:f9:eb:9d:21:5d:b1:fd:dd:e6:aa:d1:fa:37:
0d:37:ac:eb:d6:98:d7:53:b7:fd:e9:65:2d:b4:61:c7:18:90:
57:8d:9c:04:0c:84:12:78:32:60:af:a2:6a:d4:d8:b7:05:e6:
1b:5a:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:23 2025 by rpki-client