Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4977a8e4-c69a-3afb-9260-d4533053845d.roa
File: 4977a8e4-c69a-3afb-9260-d4533053845d.roa (raw, json)
Hash identifier: pevxvKMFQOhRJ9+bPrQDJZNlqXFmf4lLhFUk/UA8BDA=
Subject key identifier: DE:67:99:62:D4:D2:16:5B:C7:7A:96:1D:12:10:45:2E:D7:A7:50:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32FFBC88F9355E13D139E600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4977a8e4-c69a-3afb-9260-d4533053845d.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:ff:bc:88:f9:35:5e:13:d1:39:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=ad1ddf6d-950c-414d-8bf8-342c67e389ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:30:53:c5:17:53:c9:68:c3:8c:a2:e9:f2:
72:27:2c:46:07:40:10:82:ba:b7:55:38:2d:be:9c:
21:84:8f:2c:18:7d:93:f4:76:93:9e:99:2d:52:a8:
a2:45:37:5a:48:5f:c7:fd:52:c7:dc:6c:60:1a:0b:
c7:42:69:54:a0:5d:10:68:03:28:75:94:65:b0:1f:
34:2c:12:4e:c8:08:25:ee:c7:7d:49:d0:46:38:13:
53:c0:28:84:dc:fe:01:d1:05:8e:5c:6a:1d:db:63:
1c:2b:e8:57:17:74:7a:28:eb:0c:40:4a:20:50:02:
77:28:51:25:a6:8b:d7:ee:f1:88:7f:c0:c3:26:c0:
d3:40:d0:ee:7b:d1:63:19:6c:e8:42:7c:dc:03:56:
39:3d:94:b7:4c:17:52:15:34:5f:91:9d:a5:c8:45:
6e:4f:e9:b3:84:49:aa:c9:e8:ef:4f:38:22:a0:22:
bb:f0:18:70:b6:3d:83:e7:e0:6b:81:d8:4e:f4:fd:
1c:6c:88:b2:fc:af:9f:3d:1c:e8:cf:4c:64:62:e3:
0b:20:90:fa:43:2b:58:e0:33:e8:dc:f9:c9:50:8d:
ca:75:ec:36:9a:73:a7:7c:01:58:5c:b3:07:1d:ef:
c5:07:a9:f8:3a:33:98:f4:e4:44:e2:99:ef:28:62:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:99:62:D4:D2:16:5B:C7:7A:96:1D:12:10:45:2E:D7:A7:50:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4977a8e4-c69a-3afb-9260-d4533053845d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:87:cf:08:76:d2:bf:2e:04:67:17:2a:ec:52:15:62:b2:0d:
34:4e:ad:d3:7e:65:cf:64:a5:c3:d3:01:48:85:7a:b0:44:8f:
16:5b:75:ff:7e:48:39:60:1d:55:57:18:47:28:3d:8d:bb:c1:
0b:72:98:e6:e0:fc:ed:85:66:62:23:3d:4b:0a:de:7f:57:54:
b5:52:2c:69:14:67:5c:82:59:73:02:cd:50:09:56:e6:06:5f:
fb:7f:e6:01:95:72:fc:57:e3:04:48:7d:5b:0d:07:d3:b6:57:
78:b2:8d:2e:17:23:5b:26:6a:01:9c:29:d2:88:fe:19:be:03:
70:c8:b2:6c:f9:c8:b9:60:96:48:6f:16:70:45:9a:36:78:fa:
76:b3:da:c6:79:98:90:48:f8:3c:8b:0f:9c:64:47:28:30:5f:
61:18:9d:3c:9a:a7:6f:03:0c:e5:a0:6b:da:66:6e:81:e2:09:
85:31:da:cf:de:8e:13:3b:15:7b:b4:a2:2c:e5:b9:87:3d:b3:
39:19:8d:6c:f6:38:96:ff:de:cf:0a:03:1d:45:40:12:18:77:
56:eb:83:c6:34:a2:77:f8:3b:3f:13:a5:16:65:82:fa:e0:f3:
ec:b7:e6:f4:27:48:d6:90:a2:80:b5:a5:41:39:cc:fe:52:4a:
bc:b9:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:10 2025 by rpki-client