Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c7bddff-fb07-39e3-83de-361d5edddd83.roa
File: 2c7bddff-fb07-39e3-83de-361d5edddd83.roa (raw, json)
Hash identifier: KbU5HH1ADnOSdXorY0J7bcPfzmqt0Q+/XZRA/30GgPc=
Subject key identifier: 5A:9F:4E:7E:52:76:29:9F:87:98:FA:2C:13:57:24:A0:5A:89:95:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D313629E628DC55E99F8240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c7bddff-fb07-39e3-83de-361d5edddd83.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:31:36:29:e6:28:dc:55:e9:9f:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=906008f7-939b-4441-98ee-f41ed01b6699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:24:d0:7f:28:c5:ea:50:9f:d7:d5:18:b8:
bd:7a:a8:cb:cb:28:41:8e:6f:72:71:82:1c:61:13:
1a:ae:ee:74:b6:77:f4:63:15:32:9f:75:86:4a:be:
2e:48:5e:17:42:2e:0a:12:78:ed:87:f4:58:a4:8e:
63:f3:d0:e1:4f:10:e9:72:d9:92:bc:70:15:fa:61:
77:50:19:9b:0f:68:35:0a:89:8c:16:63:3b:4a:e0:
ee:c4:1e:b5:19:71:65:eb:7f:9e:c8:c8:49:23:bd:
be:db:38:af:db:9d:7c:16:af:88:f7:1a:9d:0e:58:
a2:7c:22:08:ef:f1:46:bc:04:e1:1b:50:59:6a:07:
39:fc:70:17:f9:6a:56:9b:8e:33:71:cd:7a:6c:c9:
9f:8c:b8:ce:ee:1d:e3:e6:a8:99:7d:a3:21:5b:0d:
86:e0:e7:b8:98:6d:c3:a2:db:6a:e3:eb:72:9e:5a:
40:dc:6c:d0:82:73:26:bf:4a:8c:6c:d0:7e:d3:32:
84:e7:ff:a5:dd:ae:aa:40:d7:61:79:5c:89:c2:e8:
1c:59:71:e6:71:e9:f4:df:1f:ac:96:bd:bc:45:9e:
c6:d1:ff:dd:e6:ea:e9:03:59:51:bf:28:bf:aa:b8:
30:85:07:c0:68:91:5d:8d:95:59:8f:70:f0:bc:ce:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:4E:7E:52:76:29:9F:87:98:FA:2C:13:57:24:A0:5A:89:95:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c7bddff-fb07-39e3-83de-361d5edddd83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0c:fe:c0:b8:ec:6f:52:7c:74:15:45:c8:f6:90:29:38:5e:
69:a2:1b:6e:62:35:84:e7:c0:66:b4:64:f1:03:cc:df:90:f5:
7d:ee:7f:52:bf:53:47:33:a4:86:ed:2e:14:b6:e9:8e:db:da:
ca:43:57:e0:76:8d:8a:38:34:b1:c2:38:6d:59:30:c8:28:4d:
b0:e6:dd:5a:cf:58:95:37:f4:16:1d:c1:44:89:86:be:cd:ee:
0d:dc:85:bf:c2:bf:0d:4e:b0:e4:7e:42:cf:72:cd:12:2a:ac:
88:6e:cf:2d:ac:4e:3b:fb:f4:51:c7:1a:21:94:33:ac:8c:6d:
23:68:79:b0:e6:20:d2:f1:66:1b:3f:f6:71:3c:43:66:7f:69:
26:7f:87:dd:b4:c2:04:6d:09:82:a8:44:01:fd:06:b6:6a:6e:
81:9e:ee:ef:e1:9b:e7:7e:6c:52:46:71:b1:32:ce:88:fe:26:
1f:dc:9b:4c:75:06:ea:66:4d:13:0e:69:22:cf:02:68:04:e2:
09:f3:b8:ea:0f:76:72:1c:92:89:68:de:2a:cf:32:3a:93:6c:
59:14:b3:89:29:48:e1:e6:12:8c:26:a3:a7:c6:d9:08:ec:28:
d9:42:fe:71:ae:b4:1c:18:e4:f4:83:71:28:05:05:5d:d9:1c:
6e:a8:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:17 2025 by rpki-client