Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39ea71bb-b331-33a7-9484-b3c66301c44c.roa
File: 39ea71bb-b331-33a7-9484-b3c66301c44c.roa (raw, json)
Hash identifier: JYpADa47mOYk+l+GZ7CjB4WiQcuKdEvAfJXOaQQD30M=
Subject key identifier: 33:57:A0:A1:D8:DB:3E:A2:55:C0:C3:18:8B:CD:DA:D0:23:E5:0E:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F1F0507F4CFB94BE45D1C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39ea71bb-b331-33a7-9484-b3c66301c44c.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:1f:05:07:f4:cf:b9:4b:e4:5d:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=9c9742f2-4e15-41ab-b323-0be7995f22a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:ab:af:e0:74:39:25:56:ee:f1:77:7b:50:
19:17:1a:33:6d:4f:11:47:a3:5d:4b:04:5c:da:6f:
62:77:95:46:3f:cc:de:81:10:37:d8:12:02:b2:f3:
20:83:29:95:a5:29:78:bf:c2:dc:77:1a:c2:5c:1d:
61:d4:63:1f:e9:52:42:5a:cd:47:d9:7c:19:d3:c3:
00:ea:c2:c2:0b:73:43:9a:92:1d:3f:40:8d:d8:b6:
a8:a5:6f:11:ea:b7:fa:9a:05:5e:d1:7b:4d:30:1d:
f4:77:17:06:77:f6:c3:f9:81:97:01:4d:94:7a:26:
c6:7a:7d:22:5e:e6:1f:0e:1c:82:c9:d9:ff:99:95:
0e:5f:1d:32:6d:6e:dc:0c:42:e7:01:fa:7a:76:f6:
ec:c2:f5:dc:38:73:c5:fc:a1:92:a8:46:7b:47:9b:
f8:02:00:83:ad:32:9b:e1:a4:bb:42:56:6d:b4:21:
ff:ac:00:46:9b:56:91:46:c6:c0:90:b9:75:1b:a1:
20:90:aa:59:ba:b5:99:2b:35:ea:3d:da:28:fc:08:
17:17:eb:8a:4f:c4:81:f1:16:64:27:5c:ad:db:9d:
dc:d7:1d:52:e8:aa:ca:20:8d:ef:f7:0c:e4:18:47:
00:3f:8d:34:c7:75:f7:c9:1b:c1:9a:b2:54:62:b5:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:A0:A1:D8:DB:3E:A2:55:C0:C3:18:8B:CD:DA:D0:23:E5:0E:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39ea71bb-b331-33a7-9484-b3c66301c44c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:6e:ad:b5:c3:1d:d1:a9:51:4a:d8:37:52:24:77:af:13:42:
05:a9:a2:01:9f:c4:7f:3b:e6:c3:27:95:40:90:ea:9d:3f:97:
16:16:ab:9b:31:a7:05:a1:18:7f:19:fc:39:01:34:c4:43:49:
95:57:ba:3f:65:b1:2b:e2:30:ab:13:b4:75:3a:b2:2c:9b:c2:
a7:a8:31:98:31:20:f9:c6:a4:bc:1b:1d:bf:6f:ce:65:34:e0:
82:28:96:5b:04:69:61:9b:e2:f2:4f:76:54:a6:63:94:3a:17:
c4:bd:01:64:d4:89:cb:b1:8d:9a:c7:5d:fc:de:41:ea:98:de:
57:37:10:d7:a5:1f:fc:f4:7d:f4:af:50:a3:6d:cb:db:87:9d:
2f:e3:1c:a0:fe:7d:e3:d6:c7:f5:6f:98:54:a8:35:36:39:17:
b3:39:30:02:bd:4d:2c:4c:9c:7e:8d:8f:4e:04:cb:24:f5:e1:
86:6a:51:d7:c2:d6:4c:f7:48:11:52:59:0c:c8:54:0b:dd:83:
a2:34:d6:0a:a8:97:86:d8:64:00:73:a7:da:2a:69:8e:ca:20:
6b:67:83:91:4c:bd:eb:07:02:82:b6:50:a1:1b:82:39:6c:a2:
63:13:79:23:38:1d:8b:d3:8d:fd:3e:52:0b:84:78:2c:09:43:
37:a7:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:00 2025 by rpki-client