Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4089179d-ea96-3f55-bd73-f67cc635d4a3.roa
File: 4089179d-ea96-3f55-bd73-f67cc635d4a3.roa (raw, json)
Hash identifier: ypNISowzx48GrCtt2rJD6/TsseRCd9qtktuowclqID0=
Subject key identifier: 7D:84:57:E3:82:A3:74:DC:67:E9:83:66:40:A8:7A:A3:C9:77:17:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD167F4E4B47B41A5B3B0440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4089179d-ea96-3f55-bd73-f67cc635d4a3.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:16:7f:4e:4b:47:b4:1a:5b:3b:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=deb10aa5-e031-4137-85ad-c0423a538fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:18:ea:7d:cd:1b:db:95:1f:88:f8:6d:07:
08:0c:44:89:59:ed:cd:04:7c:aa:93:d5:ea:97:ae:
11:34:26:b4:77:ca:0c:1b:19:8a:16:ce:a2:8c:53:
0c:37:8d:d1:b8:38:cd:fa:c2:e5:5e:28:57:31:cf:
28:94:95:e6:81:2f:98:1d:9d:4b:8d:7e:66:4f:d1:
0a:c0:33:a6:0e:c8:d7:59:3d:8e:13:3d:a9:38:05:
ba:85:94:83:34:b4:e4:6b:47:44:82:11:25:ac:63:
64:52:15:a8:19:21:30:63:91:22:fb:10:5f:43:5c:
33:11:2d:1a:1e:b2:05:3b:64:68:87:05:43:7c:eb:
f9:dc:dd:2d:1b:a9:70:0b:94:73:f4:ef:e1:5a:d8:
48:30:72:b6:6a:38:3f:49:66:b6:14:3c:96:b7:98:
57:e1:a2:bf:d6:ab:a3:2b:85:47:e1:2d:12:d8:c0:
00:3e:95:42:37:89:6c:ad:81:41:47:6f:57:51:24:
20:d3:31:cb:75:a4:89:bc:4c:46:0b:9b:dc:e8:e8:
1b:83:b9:90:27:c6:90:88:b0:b3:63:b7:b5:43:9e:
3b:08:dd:c4:6b:ba:2c:08:f8:13:b6:ed:ed:8d:ea:
27:b8:b4:77:ef:bc:24:7f:68:bd:b8:e7:2d:d0:9a:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:57:E3:82:A3:74:DC:67:E9:83:66:40:A8:7A:A3:C9:77:17:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4089179d-ea96-3f55-bd73-f67cc635d4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:f2:20:29:00:a4:76:fb:9c:48:ea:ec:73:32:d9:66:48:91:
9b:91:4e:07:25:79:42:59:e5:46:c3:21:8e:ea:97:07:d3:a5:
01:9f:74:8a:c3:fb:39:db:15:0a:84:36:c5:2a:c8:c6:4e:a2:
83:0e:38:bc:5f:50:47:ca:e7:37:1f:de:4a:58:e9:8d:29:76:
09:81:78:71:08:53:ea:08:0c:c1:d4:bd:4b:b0:7b:b6:83:e6:
48:60:bc:ad:dc:75:a6:5a:e0:70:66:8f:23:08:b2:af:58:40:
72:6e:f6:5a:42:7e:b3:0e:f1:56:7c:5f:fc:4a:08:97:42:4d:
18:82:11:06:7b:fe:85:8c:7d:97:30:c7:73:fc:50:58:a3:78:
a5:9f:32:a8:91:51:8b:4a:f0:0e:96:8d:26:05:17:88:28:2b:
88:bf:5d:89:88:f4:d9:fb:5c:10:9a:ea:86:38:b8:0d:4e:8c:
44:87:81:bc:51:e9:42:03:eb:24:6c:72:da:19:15:0f:a7:e8:
62:5b:17:8b:78:ce:6c:d1:76:d1:b2:ce:cb:b3:af:ff:8d:23:
c7:b5:02:ab:fd:a1:8d:62:88:0f:9b:be:bd:29:9c:c1:45:e3:
e2:b2:85:33:c5:d5:68:89:10:af:78:4c:2f:cd:eb:91:3d:f9:
23:4f:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:28 2025 by rpki-client