Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/371cd925-03d6-3edc-b46e-920df75eb002.roa
File: 371cd925-03d6-3edc-b46e-920df75eb002.roa (raw, json)
Hash identifier: SDQeyJCZ9b6FIqz6dNSc2VpNjsNaIKFa81SK8nqnFe0=
Subject key identifier: A6:B2:EC:46:F8:36:C2:1B:0B:1F:30:53:AF:A9:86:DC:F9:73:CB:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA786083F24918A40ADB3C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/371cd925-03d6-3edc-b46e-920df75eb002.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:78:60:83:f2:49:18:a4:0a:db:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=9ed7d744-ce61-4ff0-97b0-8008e784fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:84:88:bf:89:52:af:90:03:bf:3d:33:1d:
03:70:15:d2:05:da:dc:5a:c3:cf:b3:fa:1a:72:7e:
b4:73:9e:1b:a4:12:3b:01:a3:16:12:73:95:13:a2:
3a:19:f7:3d:b3:89:da:12:75:38:bf:d1:c0:1a:6a:
74:ee:9b:f6:86:77:66:33:80:77:6c:0a:36:3f:a9:
d8:44:44:1d:b0:7a:f1:4f:2e:4f:3b:b1:63:02:5a:
1c:01:72:bf:01:d1:15:0b:a6:f1:0d:0f:d9:67:9d:
82:96:be:7e:0a:66:ca:96:c9:f1:b4:a8:c5:5f:6f:
21:ec:c7:ab:9d:42:05:12:54:90:e9:5b:69:26:35:
4c:56:fc:24:f1:69:c9:5f:d7:64:00:b5:8f:0c:63:
49:5c:94:49:90:a3:82:70:52:32:10:5d:53:2e:e4:
8e:23:ff:c3:2a:bc:76:af:41:fb:01:46:da:ca:58:
ca:94:fe:8e:42:f8:ba:4f:b3:11:ce:00:c0:b5:4e:
05:5d:fe:cd:28:70:94:24:57:3f:82:9d:16:9f:8f:
c7:59:17:40:38:64:b8:c3:d6:aa:3b:e6:26:2b:f9:
83:71:d3:13:cc:bd:bd:40:8e:6e:12:ab:e0:df:de:
8f:86:da:01:60:9e:75:74:7e:f9:f7:34:c0:30:e0:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:EC:46:F8:36:C2:1B:0B:1F:30:53:AF:A9:86:DC:F9:73:CB:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/371cd925-03d6-3edc-b46e-920df75eb002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d1:b2:a4:40:e5:aa:5b:eb:8d:a1:cf:d2:6f:af:02:db:ae:
72:e2:46:6f:25:3d:ed:ed:00:8f:cc:87:8b:4a:72:d0:c4:ff:
81:2d:a2:52:1a:6d:27:e6:c3:8c:cc:0d:68:8d:bc:4f:e4:e4:
c9:30:9d:96:4e:cc:93:8e:24:ab:62:b5:5a:5a:67:af:2e:70:
53:c5:2f:91:2e:8a:06:2a:19:02:f7:23:bb:03:6d:ab:16:39:
c3:fd:4f:db:c2:c0:08:d0:d0:86:db:c8:88:89:d4:b5:fd:5f:
8b:c7:03:d4:10:6a:7d:61:2c:69:1f:9b:1e:16:a4:71:7c:3a:
38:13:4d:cd:75:da:b6:00:d8:d9:b3:a9:a6:0b:ab:28:39:4d:
60:72:b3:ab:79:51:52:77:41:58:15:ed:41:d6:a3:cc:89:7c:
86:8e:fe:22:cc:58:5f:2b:87:8c:bb:c6:fd:d7:7a:bb:17:6c:
7a:54:d6:06:6c:bf:6b:4d:a5:d1:1f:f6:d0:8e:e0:41:c9:4b:
f0:e4:ae:8e:33:d2:a8:7a:7c:bf:c1:26:20:74:ae:45:6e:d2:
8a:14:9f:f3:86:19:7f:0c:2f:be:ae:33:68:f8:e4:56:d5:bd:
af:b1:f5:5e:96:fa:51:6d:20:96:ae:0b:ac:90:df:44:4b:ae:
3f:07:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:14 2025 by rpki-client