Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/422af75c-f523-30af-89ce-2a4daeb36405.roa
File: 422af75c-f523-30af-89ce-2a4daeb36405.roa (raw, json)
Hash identifier: GhVdOYXN570ehkQ//cxYs/rkLYZ0ysP8zijRtvx4A90=
Subject key identifier: BC:C8:86:8A:78:80:F5:79:66:5F:78:3F:EC:3F:CE:42:B1:EB:A4:74
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E92B4BE1D4713EDF5E4239780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/422af75c-f523-30af-89ce-2a4daeb36405.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:b4:be:1d:47:13:ed:f5:e4:23:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=aa3b3777-617f-4657-802d-e519b97f69e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:ca:02:7d:09:22:6b:20:ab:8b:b8:2d:ba:
e5:11:b9:89:ce:d1:43:9e:3b:b9:d7:7f:d6:70:fb:
cf:46:db:c3:23:8a:f9:a4:87:56:1b:b6:63:59:68:
e7:17:09:b2:f6:d9:a4:32:f3:1a:6c:e3:2f:d8:00:
c7:fa:41:a4:8f:78:2c:c4:aa:f2:99:7b:29:b7:32:
83:ad:dd:9f:ae:de:5b:6e:6f:e6:59:59:d1:14:a1:
ea:bd:61:32:b5:7b:67:6f:cd:13:4c:68:1f:d5:51:
6d:d8:48:08:33:d5:c0:e4:f7:14:36:a0:fd:21:25:
a7:bc:5f:cd:80:f9:1c:14:ca:e9:b7:bf:69:b0:30:
af:34:d1:02:e7:df:a6:9d:b1:3a:7a:a3:4c:41:2c:
dc:ee:3d:40:2a:93:11:e0:8d:9e:59:bb:3f:46:7a:
c1:0d:d0:d1:45:07:37:71:9d:d8:50:70:6c:4b:e9:
e7:89:79:81:c6:47:5c:17:fc:27:77:0f:94:c3:86:
9a:ec:05:4b:30:bc:ab:3c:20:bf:f6:33:b6:58:f3:
37:39:92:bf:a2:31:88:43:91:38:ca:6f:e4:2a:ed:
1e:5a:0f:91:a5:a0:4a:f7:10:ac:53:04:0e:5b:ef:
c1:7e:8b:01:49:88:5e:e1:31:6c:de:20:9f:ca:eb:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:86:8A:78:80:F5:79:66:5F:78:3F:EC:3F:CE:42:B1:EB:A4:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/422af75c-f523-30af-89ce-2a4daeb36405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:b9:47:a1:50:cf:c0:c4:e6:5a:a7:3e:9d:2f:c0:76:db:51:
9f:0d:f1:94:e4:0f:d4:c6:d8:86:99:33:60:bf:6e:2d:64:b1:
20:4e:0c:6b:68:58:a8:ca:71:83:f1:7a:71:6c:ba:5e:5e:96:
67:83:59:cf:9b:c0:71:96:07:c7:07:be:ea:39:8c:43:40:5c:
f0:6f:bf:b4:77:c3:04:bf:ab:e5:af:99:be:33:e4:3e:a1:34:
5b:1c:74:94:ce:75:d4:ab:2a:6f:94:64:63:ef:26:1a:a4:a4:
63:c4:80:8c:aa:4a:92:0d:c6:4b:8d:b6:ff:5f:73:08:0d:73:
1c:ba:0e:c0:da:89:3b:2a:b0:8f:2c:b5:31:65:e7:27:19:f5:
59:a8:cb:46:9e:30:4d:5e:23:e1:49:d0:e9:d6:13:e0:3e:8f:
f5:06:ea:c8:2b:1a:cd:0f:d0:b1:f5:66:63:28:54:56:c6:f5:
d9:b6:7c:fe:4a:9c:69:45:eb:f5:7f:9b:d1:c1:da:fe:23:e5:
60:38:d5:22:48:f4:34:10:93:7b:51:38:53:ed:6a:ff:01:eb:
f4:65:a0:15:6c:8a:95:10:59:bf:39:b9:6a:23:84:2d:88:60:
5e:8c:2c:f1:92:f7:bb:be:39:3e:5e:5b:66:ba:ab:68:36:e4:
2c:66:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:29 2025 by rpki-client