Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b1bc1e2-1f31-3898-b994-03a8028239cf.roa
File: 4b1bc1e2-1f31-3898-b994-03a8028239cf.roa (raw, json)
Hash identifier: fKwSXMtKVeF1Zbeya59YEZluFpBxU/zFok86NsQUgP4=
Subject key identifier: 03:7F:5B:5F:9D:64:B3:18:01:2B:6D:CF:FB:EA:BC:B8:06:35:14:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80908C03B89F9B8F05F36D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b1bc1e2-1f31-3898-b994-03a8028239cf.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:90:8c:03:b8:9f:9b:8f:05:f3:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=250189dc-efdc-4bb7-8b54-2eeced453fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:38:b4:b9:0a:e7:c5:61:3f:8e:16:f7:92:
eb:06:90:73:62:75:9b:ef:c0:89:97:ff:fb:f3:19:
eb:a7:cf:35:52:1c:94:f1:a8:c1:c6:b8:7e:88:37:
a0:b4:c1:cf:c6:81:6a:bc:7c:f1:12:b2:ea:9a:70:
84:16:91:67:ff:90:8a:fe:40:b9:66:3c:79:4b:70:
aa:5c:b5:9b:0b:f7:39:0f:67:f4:ee:1d:c5:a5:d5:
d0:7e:e0:2a:88:af:d2:a4:ff:e9:54:f0:ff:85:09:
2c:64:11:18:86:3d:a3:3d:d7:d9:1b:4b:73:63:da:
9c:44:ec:b7:4f:d2:24:53:f9:5d:bd:af:d4:8a:d5:
c2:f5:3c:4c:b0:1c:54:03:63:c5:60:d7:6f:43:27:
37:29:9a:f6:36:4f:67:62:cd:5a:8d:e4:90:7e:a0:
f6:d6:c8:b1:d4:b9:1b:9b:d0:47:ee:45:0e:3b:1f:
70:5a:47:b4:76:db:3f:d0:a2:14:b6:a1:8e:b7:28:
9d:77:9a:88:51:24:87:5c:b7:b8:34:5c:d6:0c:db:
bf:23:0a:1e:45:1b:2a:d0:2f:5c:c8:13:08:76:9a:
27:e6:e3:1c:f2:77:d3:f5:da:4c:77:4b:0a:90:34:
c0:a7:17:af:0c:21:f0:bc:35:bc:0d:45:de:9b:0d:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:5B:5F:9D:64:B3:18:01:2B:6D:CF:FB:EA:BC:B8:06:35:14:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b1bc1e2-1f31-3898-b994-03a8028239cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:61:cc:5d:af:fb:c6:34:c6:2b:b6:be:f8:2f:e6:fc:f6:36:
21:78:04:90:d3:78:37:c3:27:5c:f8:2c:d5:cb:c4:35:65:2c:
77:dc:b9:c9:44:b0:a2:a4:36:3e:ee:8a:4e:7c:ce:19:4a:a3:
c3:4e:19:fe:14:b3:2b:7c:5a:6d:1e:dd:09:df:f4:05:d3:e8:
96:fe:81:0c:c3:e7:76:ee:97:5e:cb:44:b9:0c:54:00:1b:ba:
f9:25:37:e4:58:5f:19:4f:cc:c7:8f:0d:13:d2:58:ac:8c:5d:
71:7f:44:64:0f:50:fe:2a:60:a8:b8:24:14:da:11:17:0c:00:
7b:db:22:56:4c:e4:cf:0d:f2:ca:85:87:a7:fa:d0:04:6e:96:
ed:b7:5a:fe:1e:5e:55:45:0f:25:6b:36:73:dd:3a:60:2d:e6:
13:25:85:d4:62:1a:fd:54:5c:f8:d3:bb:3d:04:9f:e5:1d:9b:
1e:46:f4:a4:40:3d:be:27:51:61:14:d7:02:9a:f6:1f:db:98:
be:d2:19:1e:86:18:b6:c1:1d:4f:b3:3f:dd:ea:a7:71:17:7d:
81:85:08:39:c0:3c:81:8b:93:9c:c0:a3:d3:f9:46:2f:93:2e:
92:ea:bb:a3:d9:f8:9d:f4:8f:8b:f6:12:61:f5:3f:51:d5:90:
32:e7:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:00:52 2025 by rpki-client