Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df42098-8d4f-3f83-9f13-1f65473701ff.roa
File: 2df42098-8d4f-3f83-9f13-1f65473701ff.roa (raw, json)
Hash identifier: Osqe/Y24fUqkAIX+pXliiAmXxNsiLiwvVdAC39u00ys=
Subject key identifier: 5A:D5:51:13:4B:4D:51:47:EB:7C:97:E8:7C:08:F8:30:72:4F:CC:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD5152501CDEA31143A04500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df42098-8d4f-3f83-9f13-1f65473701ff.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.240.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:51:52:50:1c:de:a3:11:43:a0:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=d0b2f3aa-ffba-4a37-826b-df5ff326a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:74:c9:c4:2e:cf:e4:1e:69:02:bd:d2:d4:
0f:13:d4:3e:f2:83:5d:ec:57:c8:ef:8e:6e:23:b7:
9a:f0:bc:2a:57:30:39:6f:19:00:a1:d0:05:6f:81:
08:8e:5e:00:37:b6:66:73:ac:d8:12:b0:25:7a:c4:
43:93:8f:5c:ab:d2:a5:b9:f6:17:07:79:d2:ef:fd:
ae:92:81:ee:b1:89:f5:1c:8d:cf:10:f8:e7:26:da:
cd:4a:7d:5d:c1:8d:90:ca:6d:f8:11:eb:48:f9:e6:
b4:38:16:e5:e5:c9:f7:dc:4c:a2:6f:de:fd:94:cb:
04:71:62:28:a3:38:82:aa:19:f0:42:12:d5:6b:81:
67:04:d0:4a:f0:d9:86:04:38:1e:a7:f2:e4:3a:70:
bd:02:cc:8d:4b:b5:36:8e:87:f6:45:c8:6b:ce:8a:
a7:ae:b2:89:a9:3a:e1:63:05:8c:53:b4:1e:71:7e:
b4:56:ba:f8:a8:88:4c:da:8a:63:b7:b4:5d:ee:93:
32:fe:bc:4f:2a:94:ef:37:a1:5b:58:ed:3a:b9:a1:
11:22:25:18:d8:57:8e:b4:fd:8c:b8:f5:aa:58:f0:
33:e6:c7:49:10:8c:a9:8c:d9:4b:7a:8b:72:e1:d9:
e6:c5:6f:76:c9:e4:19:7c:37:39:d7:f0:01:de:89:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:51:13:4B:4D:51:47:EB:7C:97:E8:7C:08:F8:30:72:4F:CC:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df42098-8d4f-3f83-9f13-1f65473701ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:5b:f9:e1:33:69:e2:95:e7:f6:63:47:97:35:db:60:43:99:
22:ca:2e:2a:01:3e:16:90:fa:82:ae:a5:75:02:f7:c2:9c:a3:
0b:32:9d:00:ee:22:b1:e5:ef:12:90:fc:0b:7e:5e:1e:b7:f0:
c3:40:c8:1b:d3:bd:03:c4:87:2e:2e:38:70:70:14:19:c9:95:
60:37:6f:6b:ca:bc:c0:c1:48:d3:12:a7:93:94:2e:d8:c9:dc:
26:a2:17:76:a2:49:d8:0b:37:9c:7f:8a:e5:93:0a:c4:d2:d3:
24:b6:77:64:4d:75:97:b0:74:5c:63:88:c7:e1:41:c2:3f:c3:
3a:5d:d4:45:70:48:3e:25:f0:3c:e4:8d:7d:c5:77:77:33:47:
46:95:d9:0d:a2:28:da:4c:aa:d9:89:84:88:81:0b:14:64:76:
18:d4:46:3f:a5:fc:bd:f8:4b:21:b1:f5:15:ce:3a:6c:de:04:
49:3a:70:e5:d2:e2:7d:78:d5:90:7f:d0:9c:3d:a1:87:21:a1:
23:fd:e1:53:b7:08:d3:38:e7:3a:fd:21:1e:fc:62:63:a7:d9:
97:22:e4:a9:88:ac:65:b7:76:6d:61:4d:de:bb:29:b9:f1:73:
3f:46:84:d1:d6:80:fb:49:8f:72:bc:d9:c6:93:3c:5d:de:5f:
e2:05:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:39 2025 by rpki-client