Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4459ea2a-4230-31ca-9583-cfdd5b5eb13f.roa
File: 4459ea2a-4230-31ca-9583-cfdd5b5eb13f.roa (raw, json)
Hash identifier: Heygvo+ttCfAIHj+qsETiREqwvm0xLBVo4tH91OkP94=
Subject key identifier: 02:53:B2:6C:89:97:55:A2:76:19:D2:B1:91:D7:B1:BF:52:53:69:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE42BCDF886ADF09C05E60240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4459ea2a-4230-31ca-9583-cfdd5b5eb13f.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:2b:cd:f8:86:ad:f0:9c:05:e6:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=e4a0f7d0-9c93-44d1-a76e-ff8d13ebcabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:cb:f3:79:58:43:d0:90:a1:65:95:d4:9c:
da:07:b6:1a:de:99:9d:50:86:8a:05:b6:9f:9c:c7:
50:ca:40:18:bf:35:d1:df:d3:5f:d1:8b:21:12:34:
ba:18:3b:1a:70:4b:9d:9d:3f:6e:2f:5e:4a:6c:b0:
2e:7d:d0:aa:dd:f6:da:84:01:38:53:f5:00:58:32:
3f:03:3e:74:fc:ba:1b:06:da:fc:31:e6:24:5b:af:
f2:4c:87:f5:75:3b:19:1e:10:dd:dd:7d:da:b3:48:
2f:1c:63:66:7a:2d:23:6b:10:45:ff:9a:c1:e0:e8:
cf:7c:2b:71:a6:d8:a6:a7:67:79:a3:e5:85:85:4e:
b4:4f:be:26:eb:f8:de:96:a4:c1:59:68:77:ac:fa:
f2:7e:4d:62:90:c6:01:98:db:a1:d3:9e:e5:3d:b0:
d8:dc:ba:a2:f9:c7:28:66:5d:47:9f:6e:65:63:3e:
0f:24:03:8d:41:33:26:a4:28:ae:bb:32:c5:45:a2:
68:d8:e7:1c:d9:4c:9a:f3:17:58:5c:23:70:1b:93:
fa:a1:49:cc:3c:db:b4:a7:9b:e1:5b:49:27:ef:46:
77:73:b6:57:0b:25:7d:b0:85:4c:21:e6:28:84:5c:
1a:24:d9:2d:30:72:3c:74:bf:32:3a:4e:58:f0:8c:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:B2:6C:89:97:55:A2:76:19:D2:B1:91:D7:B1:BF:52:53:69:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4459ea2a-4230-31ca-9583-cfdd5b5eb13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:cf:05:df:4b:6b:ec:45:1b:97:a4:79:01:25:1b:a6:3b:c4:
b3:ea:7a:4f:b4:31:9f:be:e8:a2:df:df:5a:ab:b9:83:f2:fe:
4a:e9:23:c2:9d:a2:c7:73:93:da:2f:57:3c:ad:ce:0c:23:02:
64:2d:77:2a:c5:44:67:a8:7e:f1:fc:1d:dd:a9:ce:8f:ba:ee:
e1:c5:ae:cb:26:89:07:2c:00:c2:c1:c4:e1:a6:fd:c9:ec:43:
0e:32:8d:19:2b:c5:a5:0c:d1:e6:ed:6e:68:39:3d:c4:77:cb:
c7:9c:75:78:6e:1e:79:dd:01:11:26:27:8f:25:b8:03:53:8c:
31:69:18:04:76:51:1d:60:72:78:d9:f2:b1:ac:d7:1c:22:e9:
63:9c:b9:92:cf:f3:a3:b8:81:e1:c1:c7:f7:5e:df:c8:79:5e:
0b:8d:8c:b1:3c:ee:a1:68:24:bb:fd:e8:19:88:7a:6f:c6:4b:
1a:39:49:3c:3f:65:d2:a7:39:03:f2:84:b5:5c:d7:4b:e7:47:
da:6e:34:8f:45:d4:e8:2e:23:51:f1:9e:a2:ec:31:50:71:85:
b6:fb:89:2f:32:50:d9:a2:f3:30:b4:7f:6a:e0:b8:00:4b:c2:
18:cb:61:95:a4:91:37:21:d6:fb:d8:f2:90:a2:fb:83:24:92:
a7:86:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:51 2025 by rpki-client