Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458390e9-3e40-3564-88e2-78bb036e5eea.roa
File: 458390e9-3e40-3564-88e2-78bb036e5eea.roa (raw, json)
Hash identifier: x9zILH4S1JvCQSK8P1zkUHw48cKhgQ7hGriGeseI/YU=
Subject key identifier: A0:14:37:94:80:47:24:26:45:FD:56:10:4B:3B:74:0A:2B:EB:96:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F102B5E896D0F76945CC760
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458390e9-3e40-3564-88e2-78bb036e5eea.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:10:2b:5e:89:6d:0f:76:94:5c:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=a6ac9aa2-f8ef-4bc7-a358-7ffc25a2cf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:01:9e:b4:23:39:44:58:a3:15:3e:c9:ff:
50:87:d1:58:45:13:f5:bc:6b:d8:38:76:b7:8e:29:
53:3f:59:93:e3:9b:58:b6:8c:e2:e0:45:60:12:ac:
53:ad:09:b5:7f:eb:ec:e8:6b:a4:5a:aa:48:09:2d:
eb:e3:a8:1e:83:8f:52:ea:57:8e:3a:01:2d:9c:8f:
79:7d:2c:ba:bd:26:1c:b4:43:2a:f8:02:b9:b5:8f:
16:9a:45:9a:33:56:aa:d3:b6:0e:a8:99:a1:9c:af:
93:0e:66:fe:7b:92:a1:de:0a:1a:22:99:91:4e:9d:
83:98:5c:71:50:4e:69:66:47:0e:00:b5:62:88:cf:
50:81:39:ab:fc:97:a4:79:ac:87:64:ac:d3:93:0c:
82:22:80:8f:97:71:8a:c8:91:a5:94:71:de:88:ef:
ee:8b:4c:dd:87:56:88:3c:e2:11:a0:4e:0e:26:38:
2b:ff:39:02:7c:e6:58:e5:28:eb:c5:2b:09:7e:8e:
4d:15:e6:86:7d:3c:ab:49:ea:46:83:dd:4c:e3:69:
39:19:48:74:b0:89:ba:7b:b7:ea:6f:81:fb:dd:4f:
d9:83:94:06:4d:e0:a6:81:95:6f:af:b7:59:95:5c:
87:8f:aa:1e:76:a5:66:d0:73:ca:8c:6e:c5:84:f5:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:37:94:80:47:24:26:45:FD:56:10:4B:3B:74:0A:2B:EB:96:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458390e9-3e40-3564-88e2-78bb036e5eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.244.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ac:98:a3:c0:50:12:59:d1:80:79:c1:07:95:9e:64:c9:0f:
99:98:93:ce:ce:21:a5:f6:8a:80:40:0d:d1:fd:89:53:ad:40:
53:5c:ff:c5:51:1b:50:27:36:92:89:1c:94:3a:d0:d4:61:c3:
c4:df:f1:82:56:58:47:8a:46:73:03:ec:9c:ba:a3:e3:f5:22:
3e:04:af:63:71:42:87:56:c7:74:e6:f7:b4:8d:ef:20:3c:bc:
50:db:ca:02:1d:ef:ce:ee:c5:0a:66:9c:18:d9:a5:bf:b7:7f:
a7:f8:47:31:8e:5d:a1:d4:5d:b0:09:40:66:b1:e2:db:f3:1c:
4e:ec:b4:71:a7:ca:48:2c:24:e8:07:99:9e:b3:4d:06:b6:4a:
63:b9:d2:1d:54:0c:a9:ca:73:5f:6e:d7:e5:95:ba:25:ad:e7:
32:02:f8:fb:1e:fa:4d:b4:3a:20:08:03:34:e7:ff:a2:57:0d:
f0:12:ad:9f:38:e7:fc:97:45:56:72:c4:88:45:d4:f8:b5:a5:
d0:00:91:70:38:ce:01:ff:4a:d7:cf:16:f7:43:c6:82:09:61:
95:b7:69:77:95:9c:73:41:2f:35:17:48:54:74:69:ee:b1:2b:
37:54:ae:64:9d:f9:ee:83:2e:89:2a:b5:55:00:31:8a:95:d3:
b6:bd:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:55 2025 by rpki-client