Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2dd31891-2e2d-34b4-b406-8cf754331302.roa
File: 2dd31891-2e2d-34b4-b406-8cf754331302.roa (raw, json)
Hash identifier: HIKKYp+rusj4fMnAq8sRXl2HBLu+6LNoN/s+Vjo43P8=
Subject key identifier: 41:06:58:47:F1:55:11:C0:D6:B1:13:12:2B:1C:29:35:E5:59:9D:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4066A0DCA68C8479BE40D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2dd31891-2e2d-34b4-b406-8cf754331302.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:06:6a:0d:ca:68:c8:47:9b:e4:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=e14a62cb-94ec-4131-81ec-8975ade79b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:54:49:8a:37:08:c1:0b:5e:22:94:a0:72:
ae:aa:5a:8e:36:53:5c:6e:86:32:24:cf:a3:29:f7:
f3:51:15:14:e9:d6:a4:47:ad:25:dc:31:1b:c1:85:
91:62:0f:4a:31:ad:bc:1b:68:be:d8:31:af:52:74:
fe:34:6a:c1:6b:cd:d1:4d:94:f3:a6:21:71:72:7b:
8d:9e:93:e6:9c:ab:96:46:35:36:3c:fa:5b:38:2f:
31:e8:be:bb:25:9f:04:56:b2:5c:4c:3a:0f:8f:40:
60:61:05:ca:e2:d3:08:e8:e5:91:c1:22:0c:9c:22:
66:82:ea:35:41:1d:60:8a:e1:5c:69:0c:23:e7:54:
95:ef:bb:90:65:21:00:54:8a:ff:4a:91:9d:bf:ec:
50:ba:5a:6a:b5:a9:0d:6b:85:66:fc:1e:ec:e0:9e:
76:de:ae:3c:8c:cc:36:e4:e4:7a:bb:76:a9:b7:d6:
a1:d7:e9:28:9b:7b:b8:f5:ce:24:59:e6:df:cc:6b:
ff:28:56:6f:a0:65:5f:a0:26:c0:c5:f0:51:fb:f9:
e8:0e:49:32:3a:21:1e:07:5b:90:c3:d8:64:f5:c1:
a0:40:a3:94:07:4f:f6:5f:91:4c:9c:ac:47:b4:80:
4f:2c:2b:e7:06:f9:a3:30:6d:48:27:89:e5:a2:81:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:58:47:F1:55:11:C0:D6:B1:13:12:2B:1C:29:35:E5:59:9D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2dd31891-2e2d-34b4-b406-8cf754331302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:4f:21:4e:1c:fd:80:28:28:da:9f:54:19:e5:ea:44:5c:9b:
77:10:68:b9:d3:3d:6d:79:b3:17:fd:f0:4f:2b:18:6e:b0:13:
b2:59:a8:19:7e:03:ec:c1:b6:ff:52:c9:14:da:e7:ad:ce:05:
0f:57:a6:5b:4c:d9:86:29:08:b7:53:21:cb:15:86:f8:8c:a2:
9b:0e:22:b3:08:da:f6:28:3f:1b:fc:0f:57:fc:06:9a:7a:29:
07:5b:62:f9:5b:f3:21:ee:9e:d1:89:52:71:5b:16:fe:9c:72:
fc:99:e1:90:60:b0:fa:9a:0e:35:4f:9b:a1:96:c3:cb:21:d4:
d3:6b:ca:82:51:d8:35:01:69:ed:e6:ca:ac:3d:86:56:22:99:
b4:df:1a:01:ae:92:ed:42:7d:11:ab:63:36:6b:6a:9a:eb:47:
c8:d5:aa:e6:50:44:ac:58:30:bf:ee:cd:0d:22:5a:77:d3:0e:
4b:72:55:3e:3e:b7:69:36:93:12:12:03:ad:be:e8:6f:30:dc:
e9:62:7c:5b:41:e9:68:3c:44:6b:45:b2:43:ae:ac:d0:53:37:
65:8b:72:1b:e2:1c:1e:3a:66:3e:88:f2:b4:a3:8b:dc:87:55:
dc:bb:32:e2:0e:27:07:4b:2d:34:16:c1:40:5c:c2:bf:3e:81:
54:b1:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:47:15 2025 by rpki-client