Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f03717b-a470-3d6c-9ff2-ff7f4e0eb8b9.roa
File: 2f03717b-a470-3d6c-9ff2-ff7f4e0eb8b9.roa (raw, json)
Hash identifier: 5Y8fq7b6bQS4TC2Bb7YDvEZynYVumiB5bYGWUpwAR+A=
Subject key identifier: CE:EA:67:F5:94:28:D8:53:87:62:27:51:00:38:DB:1C:74:58:C9:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE1FBD1EC04B8229FEA59A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f03717b-a470-3d6c-9ff2-ff7f4e0eb8b9.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:1f:bd:1e:c0:4b:82:29:fe:a5:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=708ef52e-31e5-4047-9301-42d745cadb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:ce:5c:98:4e:a6:ee:8f:a4:a3:7b:34:1d:
7e:3c:7a:b2:9f:70:6c:b9:04:1e:1f:44:96:19:e7:
5b:bc:80:b2:4f:d2:b8:cc:48:e8:44:2e:0e:de:a9:
fe:53:52:80:b7:23:ac:bf:94:cd:dd:09:5f:f7:4c:
c8:9b:fe:b8:fe:77:5c:cf:8d:3f:1c:30:a9:55:5a:
b5:82:92:26:2a:9a:e9:f3:a9:e5:e4:41:19:9b:ca:
c1:58:a7:d8:89:18:75:08:24:da:7f:55:59:61:0e:
00:f3:17:ad:50:83:b2:48:26:83:3f:f1:f9:a9:a2:
ff:6d:cc:d4:e3:5c:62:04:fe:44:6a:51:ee:84:95:
05:f4:9e:d5:73:e0:bc:2b:e2:6e:c1:24:81:f2:40:
7e:c0:a5:f9:1b:62:a6:71:d2:9c:5c:f4:38:86:fa:
51:da:cc:bd:65:d7:01:eb:13:ea:e3:85:3a:da:5b:
e1:7e:62:75:2f:97:22:0a:34:f1:bd:0a:9c:e9:f1:
42:3f:8a:79:39:0c:3b:16:10:4f:48:d9:54:31:26:
63:6f:df:23:67:09:52:45:db:b1:3e:f6:c5:44:05:
83:8e:d3:ad:b2:0c:54:5e:c5:27:49:68:bf:f8:1f:
ce:2d:7e:64:9e:8f:a3:ec:98:78:3a:c9:91:7f:59:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:67:F5:94:28:D8:53:87:62:27:51:00:38:DB:1C:74:58:C9:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f03717b-a470-3d6c-9ff2-ff7f4e0eb8b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:96:3f:53:96:38:eb:6e:6b:93:91:1a:10:28:22:b9:5a:14:
cc:ef:6c:a8:98:b1:90:84:73:99:eb:c7:fc:b0:f1:16:c2:74:
e4:63:b8:3b:d9:2e:d0:02:cf:1c:bb:c3:ac:98:fe:c8:f4:05:
d0:49:62:db:6f:2a:3d:ce:f0:7e:46:43:0a:00:59:3a:73:5b:
70:b8:71:11:5d:ff:b1:7f:9b:24:4c:90:4f:70:86:3e:19:2e:
f2:65:e1:1c:d3:5f:58:23:9b:8c:9b:71:ec:56:91:96:88:3e:
d1:69:00:1f:9a:77:aa:4b:51:c7:09:ae:9a:ef:a8:41:6c:c0:
e1:37:f9:7e:c6:d8:8a:28:a1:89:8b:27:63:12:e6:10:13:58:
e1:29:ed:ec:55:52:40:75:fd:f8:a7:2f:cf:9e:92:b9:b6:18:
eb:a9:43:43:03:ea:71:1b:1a:51:9d:dd:a5:00:03:48:7c:b7:
9b:d4:97:fe:63:f6:42:8b:08:74:5d:1c:6d:84:7a:b4:0c:6b:
25:1a:ee:28:c2:b0:f2:03:8f:0c:cd:da:ef:c7:83:a3:73:71:
dc:b4:24:68:e7:3a:41:88:e9:31:23:16:5a:e7:39:aa:d4:52:
2c:bc:d1:22:62:94:d4:f8:88:6a:ea:8a:1a:55:e7:b4:75:e6:
a9:6d:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:48:49 2025 by rpki-client