Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cadc30c-d8c3-302b-85ee-65f16bfd3801.roa
File: 4cadc30c-d8c3-302b-85ee-65f16bfd3801.roa (raw, json)
Hash identifier: WT//ohGNqf07b6oZM9juECLkBkOXQaLEG8MACfPqQ3Y=
Subject key identifier: 5E:91:80:03:7F:99:88:E2:63:25:85:45:A4:B6:BB:A2:04:6B:97:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C963465E134C61C7EADD9AA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cadc30c-d8c3-302b-85ee-65f16bfd3801.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:34:65:e1:34:c6:1c:7e:ad:d9:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=b5d61c6a-9bea-4aed-90da-eca08be88a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:c2:8c:00:de:70:d5:0b:56:1e:7f:98:1f:
63:26:be:b3:6b:6a:e6:24:5e:79:75:00:17:e5:2a:
b7:ba:3b:82:07:2a:e3:6f:a4:bc:12:a4:15:9c:ef:
2a:7a:21:73:32:7a:5b:46:73:37:0b:29:60:e5:2f:
05:6f:58:0e:7f:e1:12:c4:f6:f7:ed:1f:e9:ec:90:
ed:d0:05:b1:f7:cb:d4:86:f9:b4:e9:21:38:00:28:
91:d8:bf:22:99:48:e0:fc:8b:f6:c8:db:54:34:3a:
e1:72:9b:ca:0f:2a:de:98:66:8a:19:7b:b3:a7:a5:
15:53:9e:53:34:15:95:29:f7:e2:59:dc:3d:d8:a4:
09:a5:b5:b8:cb:96:c6:a2:ea:b2:88:57:d3:59:e1:
d5:08:3f:dc:fb:19:5c:a0:ad:1b:88:c2:3e:aa:b0:
7d:81:de:ae:7b:08:0d:07:6e:7b:e7:00:56:be:da:
06:71:9b:1d:fd:81:55:b6:a4:d7:b9:61:c3:1d:e2:
20:34:8a:54:0d:0d:7f:c6:4f:4b:c4:69:1f:96:48:
32:58:de:50:8a:b2:10:56:2c:8e:3f:48:1f:05:73:
16:87:30:f8:9a:1e:02:1e:88:f9:7f:3a:b9:86:ac:
71:63:97:89:c7:7f:00:69:95:e5:8a:42:01:0e:60:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:80:03:7F:99:88:E2:63:25:85:45:A4:B6:BB:A2:04:6B:97:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cadc30c-d8c3-302b-85ee-65f16bfd3801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:c7:bc:0e:3d:90:06:26:f7:54:a0:a7:5d:a7:9a:db:2f:19:
30:a2:f8:e5:bf:a6:11:96:40:84:52:d6:7d:17:ad:4b:6d:74:
77:1d:ed:bb:bf:78:94:1c:10:44:65:6a:e9:fb:05:1c:20:c0:
13:b6:ad:61:81:8a:02:77:43:16:30:cb:1c:f7:58:e4:db:bc:
cd:62:22:66:63:cd:ec:95:5a:49:f3:57:e4:a7:a8:e1:80:91:
47:3a:d0:47:16:17:29:50:a5:7d:80:9d:83:56:f0:0d:ab:af:
d5:50:34:2d:74:10:f9:a2:b5:8a:5e:26:42:41:a0:e9:88:84:
c6:c4:a0:6f:d5:6a:eb:f5:8a:a9:f2:3a:af:85:a7:bd:29:e3:
ac:d7:1a:ff:52:37:5b:b3:ab:48:ca:fd:da:d3:99:9a:89:ec:
89:47:ee:b0:6f:8f:54:41:f2:4e:f6:27:fb:f4:9f:82:98:58:
75:25:29:c0:3a:27:1b:61:8b:92:84:16:0b:e0:26:f3:dd:e7:
a5:14:ee:fa:40:b7:e6:51:66:b7:82:04:3c:e4:2a:4a:c3:9e:
53:ee:b3:21:48:c6:84:a7:98:88:48:f9:5c:81:a8:4d:43:35:
52:26:84:73:c6:ce:d8:6a:05:50:b6:3e:42:fa:83:a3:80:2b:
3d:a0:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:07 2025 by rpki-client