Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33cb6ddd-91dd-3937-a183-21dd2930fe3b.roa
File: 33cb6ddd-91dd-3937-a183-21dd2930fe3b.roa (raw, json)
Hash identifier: //a4CrF+2ojVbOXL2sR119tHYeo/PnsZhIwyK9x76OI=
Subject key identifier: 5A:DF:8C:14:7C:B4:55:DF:2B:9C:BB:D6:4D:E3:39:43:23:19:93:D2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E21A3FBF4B3A17047A6A16600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33cb6ddd-91dd-3937-a183-21dd2930fe3b.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:a3:fb:f4:b3:a1:70:47:a6:a1:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=0057c342-2226-49f2-8a49-88ca9ff8fb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:ad:e0:f4:b3:b3:c8:60:58:99:d1:1c:23:
e7:a5:4b:06:24:a9:60:48:3f:df:eb:a7:c6:68:03:
68:e8:46:35:d0:1d:b5:f1:3c:bd:ba:19:52:f9:79:
56:23:44:3c:82:78:dc:f7:26:05:88:e2:c3:e3:e2:
4f:1c:a4:7d:30:a8:88:47:2e:6a:ce:8f:73:35:cf:
e4:2f:58:cf:1e:ec:59:fe:44:5b:88:47:d1:59:da:
c3:02:89:ca:5b:c8:86:9e:a2:de:d8:ca:13:59:59:
ea:6f:f9:01:be:e5:13:82:92:b4:88:20:26:34:2f:
13:be:85:88:3c:e8:4b:14:d8:27:0d:b2:06:28:cc:
54:1a:6c:26:e8:f4:3c:93:54:c3:06:a9:24:cd:f2:
aa:5c:4d:c9:0d:28:23:80:ee:d4:63:a9:c7:2d:3b:
ff:cd:3f:78:84:08:4d:47:3e:70:97:1d:67:30:2f:
7d:07:e4:8e:51:b7:bf:cb:81:1a:cc:df:36:69:29:
1d:8b:df:02:be:cd:5e:41:10:07:bd:68:a7:40:ae:
bc:58:a1:c9:81:7f:6f:e9:dd:7c:e8:02:93:34:73:
ea:73:75:28:27:ee:e6:c4:d8:c5:88:aa:62:26:15:
1b:90:f6:d5:ac:d2:19:e1:09:df:ef:82:14:8a:c6:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:8C:14:7C:B4:55:DF:2B:9C:BB:D6:4D:E3:39:43:23:19:93:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33cb6ddd-91dd-3937-a183-21dd2930fe3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ac:76:26:a0:f1:84:bd:98:0c:d9:91:1a:bd:e5:e8:cd:11:
10:3d:be:48:41:f6:c1:61:fe:21:64:1f:4b:16:bc:09:24:4f:
1f:e3:c3:3a:22:57:b1:61:bf:d4:c3:dd:63:2f:31:1a:4d:23:
8e:78:71:ed:e6:d6:e2:d2:78:8a:06:93:31:53:e6:ac:af:a7:
bb:2d:13:0d:06:f1:c2:a4:2e:d9:9e:be:27:78:98:d5:5d:28:
b5:90:49:02:cd:b1:d1:19:11:15:67:22:5f:b8:2f:44:e7:81:
43:de:b0:8e:e9:e4:6b:7e:9b:62:a4:74:e0:6e:b1:2d:fc:b4:
87:32:00:39:c4:94:fb:8e:7c:7c:54:09:03:a0:da:71:45:82:
a2:c6:dd:b6:1e:3f:19:ed:d4:43:c0:85:e4:1c:c2:8a:25:b0:
ad:1c:54:b4:00:da:34:e1:d4:41:14:6e:d7:73:b0:e0:79:05:
57:8d:fb:20:7d:f9:dd:5f:e8:b7:f9:3a:d2:0a:3b:a9:c5:38:
23:4f:10:24:a8:19:c8:c4:3c:d8:cb:58:ec:df:29:8b:35:8a:
a7:75:25:8b:dc:2d:f4:72:2a:bf:3c:36:68:b9:33:c3:d7:fc:
44:f2:42:58:ba:4a:6d:08:da:89:42:63:15:db:34:0a:75:f8:
54:e5:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:15 2025 by rpki-client