Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/406bdb98-5d3c-330c-b5cc-8ab79dbddaa0.roa
File: 406bdb98-5d3c-330c-b5cc-8ab79dbddaa0.roa (raw, json)
Hash identifier: KeV7YdZp1vVkSYdHFFznQSWcS+DthObDuexX8OuQUAA=
Subject key identifier: 07:A7:04:B8:67:B7:CD:1C:3B:44:0E:59:93:7D:FC:DB:4F:5F:D9:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8090A573F40134D3D1445E50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/406bdb98-5d3c-330c-b5cc-8ab79dbddaa0.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:90:a5:73:f4:01:34:d3:d1:44:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=228864ee-cbf5-4262-9f31-d3e1dcdf0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:f1:a4:1f:60:cd:3b:6c:61:01:11:45:d4:
de:9a:26:1c:81:a1:9c:c4:90:b6:b4:a7:54:f4:6c:
03:b1:1f:5e:16:97:9e:a5:7a:dc:9c:b1:f5:40:48:
58:bd:9f:07:97:ea:13:dd:17:72:ea:b8:1c:c0:7a:
69:8a:44:6c:ea:c8:2d:2f:fc:74:a2:00:f9:54:81:
ad:4b:dd:fa:f2:96:42:5d:75:20:33:31:0d:4e:45:
c0:9b:31:d1:20:56:6d:61:1a:a0:b3:73:78:de:eb:
66:bb:ec:e9:98:5e:e7:7c:32:96:6a:34:77:cc:0e:
ab:72:ef:b5:0c:96:66:46:0a:80:82:67:36:98:3d:
c0:c0:00:1b:4c:21:d1:f1:7a:7e:4f:e2:47:06:92:
85:c9:bb:8b:70:22:1f:98:f0:c5:43:e7:bd:a7:e1:
3c:6a:2e:66:b1:96:49:a1:f4:52:70:61:ee:90:01:
05:97:65:4f:4a:eb:33:8a:d4:e0:23:b6:9d:45:a0:
88:e0:79:5b:16:1c:2b:76:27:8d:ae:26:a4:4a:7e:
7f:9d:25:1d:d9:de:26:82:ca:e2:49:f2:aa:54:54:
52:61:49:68:53:31:3b:33:9b:b7:d8:5d:fa:1d:80:
31:f2:20:b7:da:05:55:91:b6:db:3e:c2:8b:e8:d0:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:04:B8:67:B7:CD:1C:3B:44:0E:59:93:7D:FC:DB:4F:5F:D9:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/406bdb98-5d3c-330c-b5cc-8ab79dbddaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:2a:54:75:af:8d:79:5c:f2:4c:26:8a:91:e7:17:f0:97:ab:
1f:96:8a:ba:db:ad:45:1d:8c:b0:2a:a5:03:32:fa:dc:ac:54:
5f:a2:92:6b:91:ff:ed:19:70:ea:bf:65:78:72:ba:b4:fa:a5:
59:07:92:94:66:2c:94:76:ea:5c:88:48:5a:17:d0:ac:79:41:
68:24:e8:d3:8d:f1:65:43:9f:0b:d9:99:2c:d0:b1:19:c4:61:
9e:f4:16:5e:38:df:5f:b5:3c:a6:4c:a2:51:51:8c:af:39:19:
6c:28:c8:ba:18:57:e6:9f:d6:29:67:ae:b0:a7:a8:0c:96:93:
80:d2:94:50:3b:cb:ad:27:8c:08:c3:73:84:98:2c:46:0a:eb:
bf:67:3d:0f:52:d7:c1:23:51:20:ac:e3:61:ee:cd:d9:7a:5c:
dd:28:57:d7:22:a8:12:ed:b8:ea:e3:41:1d:ad:12:42:b4:a3:
62:a4:40:d9:73:bf:5a:da:3c:b9:50:14:79:07:6b:97:66:7c:
e5:f7:d5:fd:80:f9:2c:d6:54:f8:e0:aa:de:2c:c7:81:8f:da:
75:6c:6a:d2:0e:91:d1:3b:27:14:29:f0:57:75:c5:55:73:eb:
ad:cd:2c:4c:f9:5b:0d:bf:3e:c2:e2:f3:c5:44:15:e0:56:5a:
c2:ee:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:30 2025 by rpki-client