Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42c6a2dd-a8e6-38ce-bb10-e15025ab2131.roa
File: 42c6a2dd-a8e6-38ce-bb10-e15025ab2131.roa (raw, json)
Hash identifier: 16mTv+/H6xH5KACFWmxq4T+9qR0S6wIBLqo3hdsJAsA=
Subject key identifier: B6:08:BE:E1:E4:63:DA:C2:E0:9A:BF:49:BF:10:95:02:DA:E1:52:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5982AD051F1C3BDB2231FEB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42c6a2dd-a8e6-38ce-bb10-e15025ab2131.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:82:ad:05:1f:1c:3b:db:22:31:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=a7e2010e-064f-40e3-bff7-45c51a76e8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:8c:15:c5:db:de:b3:ba:a7:79:0f:19:68:
b9:11:67:0f:27:c1:30:51:37:72:f5:69:f2:07:c0:
d5:50:6a:f3:ca:81:50:16:d9:50:fe:26:a8:d4:ed:
83:b8:7a:1a:88:36:cd:3a:02:a4:82:95:2d:fe:cb:
61:77:79:e9:ed:f1:a2:b4:0d:25:53:7c:ad:6d:0d:
8b:a2:34:e9:46:d4:99:7e:7e:44:c5:16:18:2b:cd:
e7:1f:a0:6c:a5:f8:80:cf:92:96:c8:1a:6b:1f:e7:
5b:6f:de:cc:9d:26:71:f0:db:da:0b:ea:9a:fb:9c:
1f:54:96:05:0e:b9:f6:90:55:f3:82:1e:22:6c:b1:
8a:43:51:bc:52:da:34:3c:21:1b:de:7b:c2:e6:ab:
3f:34:4c:3f:bc:c2:75:42:b2:55:c0:3c:9d:62:56:
45:3d:5c:d3:f7:26:b9:32:b6:27:98:84:fa:0b:dc:
65:50:5a:0d:c0:16:4b:d4:13:b9:6b:39:76:67:cc:
2f:d4:15:95:73:8c:a4:6e:8e:5d:ab:96:fe:2a:42:
09:cd:eb:bf:cc:a7:04:7c:05:66:23:e3:d2:4d:9e:
de:e6:1b:d5:bb:8a:1f:55:7d:50:68:01:c3:c1:17:
3a:c0:ff:2c:a0:af:73:2a:38:cd:ab:2e:46:e9:a4:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:BE:E1:E4:63:DA:C2:E0:9A:BF:49:BF:10:95:02:DA:E1:52:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42c6a2dd-a8e6-38ce-bb10-e15025ab2131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c6:2c:d3:98:7b:24:a3:07:6e:6c:2b:3d:76:84:ba:64:74:
9b:b5:64:2a:45:4b:e1:a8:4e:1c:a1:8b:76:d3:61:5c:f7:ac:
6f:0d:65:e8:df:8b:24:23:a1:f5:6a:2f:b4:7e:a5:ca:9f:0f:
45:a9:da:64:c1:2f:22:45:3c:01:16:96:20:b6:75:b8:2c:d4:
1e:7f:96:87:0b:d2:3c:00:ed:ca:dc:93:38:e1:38:ad:f6:fd:
8a:e6:c3:f0:9b:03:51:af:d4:49:0d:d5:45:1b:d7:96:5a:34:
43:90:bd:aa:8e:af:df:bc:c9:80:fe:09:2f:30:80:8c:8e:bd:
98:4d:59:c9:2e:9b:e9:a7:ed:8f:ab:a1:41:70:e0:b4:b9:7f:
9d:a7:65:cb:27:00:52:d1:e7:1a:21:48:2e:dc:ea:64:d7:67:
07:0b:df:db:54:4e:60:ef:bb:83:de:a1:01:1b:79:77:45:c8:
85:84:e8:69:40:eb:b7:2d:98:20:05:e4:fc:73:5a:99:92:8c:
d9:f7:93:4f:c2:61:93:53:8e:1b:e0:5a:38:46:96:22:a1:e1:
de:d1:3f:48:de:dd:46:22:9f:a9:5c:b0:ea:fb:ee:ef:2a:30:
f0:86:5d:df:d5:0a:e9:2b:38:7e:b9:7b:4b:81:2b:18:98:e0:
62:91:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:59 2025 by rpki-client