Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aa0a68e-63d1-3274-b0b2-dbaca705bc87.roa
File: 4aa0a68e-63d1-3274-b0b2-dbaca705bc87.roa (raw, json)
Hash identifier: cwFGMqkFKOXC4U/nHJsjBFcJzNvjOm3qgfJd+ekYMxI=
Subject key identifier: F2:1E:39:26:BA:6E:56:8E:65:D0:9E:56:47:94:6A:7D:52:FD:40:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F10518B914C1804B4509880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aa0a68e-63d1-3274-b0b2-dbaca705bc87.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.238.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:10:51:8b:91:4c:18:04:b4:50:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=e6702453-464b-47f8-a7c1-8d23181d0639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:b0:8e:36:05:4f:75:3b:8b:fe:31:fa:f0:
54:c3:ba:6d:8c:6c:a7:9a:8c:47:ff:b1:b1:5a:b7:
6e:a7:e8:8f:43:07:88:6f:39:b2:eb:cc:bf:52:51:
ff:f5:6e:09:ad:87:8d:fb:d6:54:c0:ed:ae:f5:4a:
e1:5b:42:a1:42:9d:c3:93:c9:73:92:05:c4:f5:e8:
c4:d4:d5:93:38:c3:50:91:76:53:aa:0a:f9:18:a0:
36:a1:32:da:10:d7:fa:26:5b:aa:59:ec:92:65:d1:
6b:8a:94:13:35:3f:b9:e2:c3:b6:3f:14:1a:ba:0c:
fc:f3:40:d1:8a:a5:5f:a0:c3:72:cd:2b:90:c6:a7:
7f:3f:fb:79:75:cd:09:5f:47:77:53:ed:f6:8c:f9:
1b:d9:e0:6f:aa:f3:6d:7c:a9:83:e6:c3:f5:2d:93:
9f:cb:85:0f:a9:7b:22:5f:5b:1a:82:80:96:48:88:
da:55:4f:e5:54:32:f0:09:41:99:67:de:12:77:31:
16:79:65:dd:ca:ae:ec:04:cd:0c:bd:f4:db:dc:ac:
f4:e4:fa:b7:d5:96:63:3a:fd:16:20:72:77:b9:53:
e0:1b:f1:53:32:ff:55:04:72:28:d7:60:98:f3:54:
be:db:c7:12:06:f8:69:63:dd:29:13:a1:7b:07:6f:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:39:26:BA:6E:56:8E:65:D0:9E:56:47:94:6A:7D:52:FD:40:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aa0a68e-63d1-3274-b0b2-dbaca705bc87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.238.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:23:17:58:83:bf:47:31:ea:be:c9:96:f8:e2:82:16:a9:3d:
ae:0f:8f:34:36:2c:ea:0d:72:2c:c9:5c:39:dd:5d:97:14:47:
87:82:e0:3c:17:db:be:4b:9e:27:b7:f6:68:7d:d6:df:d4:d5:
09:ca:8d:50:1a:60:7f:14:da:b6:e9:cb:4b:10:75:ef:f5:ac:
e1:93:0a:9a:81:19:bc:2d:fd:1c:52:1e:39:14:54:97:48:56:
30:c4:44:ed:3b:86:24:45:8b:aa:30:d2:d5:72:30:03:96:60:
2b:f7:dd:44:6f:18:b7:66:b4:29:71:ff:27:dc:8e:ee:db:c9:
53:30:ec:7c:5c:8e:89:5b:b7:b0:69:38:e5:24:20:d2:39:81:
cb:f5:5d:f5:b6:a4:2c:7b:4a:a2:c2:ab:4f:9c:ff:b6:c8:67:
53:17:2b:61:3f:29:e5:d3:fc:2a:ef:4c:35:83:60:b6:e8:cc:
8d:26:d7:1b:1d:21:dd:e6:e4:a1:b7:85:5d:c4:2a:5c:79:91:
f4:3a:28:54:01:53:ad:db:d4:02:8a:27:30:7e:c3:39:5c:bd:
c4:3b:f3:2a:aa:77:49:98:1c:78:ed:0b:c6:7e:3b:1a:83:1e:
00:18:78:a7:19:a6:05:34:dd:77:28:01:25:f1:35:05:78:f1:
20:cc:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:12 2025 by rpki-client