Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbc7115-eab0-3dce-8bbe-4a61bcd19466.roa
File: 4cbc7115-eab0-3dce-8bbe-4a61bcd19466.roa (raw, json)
Hash identifier: Mgilg0o4DxoOMoxvJN6rKtNJfgHrUaMCR+1uabpbSAE=
Subject key identifier: A3:FA:10:48:22:EF:AC:F4:D9:1C:62:7B:AA:BF:35:FC:AD:1E:54:FF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD43342996A5271EDE7E1B000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbc7115-eab0-3dce-8bbe-4a61bcd19466.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:33:42:99:6a:52:71:ed:e7:e1:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=bcb1c6b0-e35f-443f-84a0-8c8608e9cc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:09:88:b7:4a:4c:10:1c:af:59:73:b5:ce:
3f:eb:a2:73:bb:86:17:c8:88:37:ba:76:aa:a0:6f:
0d:e6:fe:c5:fb:c7:48:24:a7:51:fd:e0:fc:34:d2:
f3:a0:ee:e9:84:81:a8:8e:ba:0e:42:fd:9c:29:e7:
a7:aa:6e:be:23:43:99:38:a9:e7:2f:bc:6c:46:2f:
06:c3:06:6e:16:2f:02:4f:3f:cc:5d:c9:1f:26:7e:
77:fa:bd:ac:9d:dc:8e:b1:26:b0:82:7b:8c:d3:53:
1e:3c:5e:1e:06:e3:df:8a:67:6c:10:6a:c2:ef:7d:
1b:9c:56:de:a6:72:b0:b1:54:55:73:17:09:b6:22:
af:9e:6a:9e:b0:5e:9a:5c:07:4d:cb:d4:98:5a:ba:
7b:0a:96:ea:31:ca:59:0a:a1:2a:95:79:2f:af:ec:
4c:12:3a:d3:64:81:2d:a2:41:ee:fd:fd:f4:de:28:
b9:84:28:6b:20:1e:7d:2d:5e:74:d4:c4:73:c0:3e:
08:1b:f7:ae:d5:fa:e1:b6:74:bd:9c:46:13:02:12:
2e:b8:3d:a9:0d:a1:12:8e:b6:6c:5b:61:51:f8:cc:
ae:4d:c3:5f:9f:1b:cd:0c:a7:2a:27:0e:06:4b:c2:
a0:4d:1f:20:60:1d:e3:13:b5:63:05:9a:c9:2b:5a:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:10:48:22:EF:AC:F4:D9:1C:62:7B:AA:BF:35:FC:AD:1E:54:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbc7115-eab0-3dce-8bbe-4a61bcd19466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a3:a5:3f:00:dd:5d:de:0a:b5:ef:ce:a3:f0:d4:69:3d:3c:
15:82:42:62:50:b2:0f:1d:b2:38:88:2c:e6:57:c7:67:fd:16:
fb:55:90:28:c7:ba:5a:0c:77:da:df:33:2c:7f:7a:5c:3c:52:
46:fa:e5:51:5a:eb:35:11:68:7e:96:55:47:6f:f7:eb:9f:b7:
a3:c0:ac:06:00:36:e8:33:d9:9a:9c:49:03:0f:73:eb:07:21:
87:b1:e5:7a:fa:01:31:45:c8:24:9c:16:88:55:e2:d6:4f:b4:
f3:9a:9a:21:ed:3a:aa:c3:d0:c6:81:b0:1a:c3:3e:5a:2b:fc:
74:31:9d:d6:73:56:fd:1a:b8:46:3c:ea:ef:f9:b0:52:63:78:
fa:7a:3f:f2:70:bc:10:53:48:5e:95:de:d1:1b:f0:eb:20:d0:
6c:cf:65:0e:01:45:39:b7:f9:d2:06:fc:8c:11:cd:6c:30:1c:
a9:7c:82:f3:b3:21:f3:3a:0a:2e:9f:49:f3:6b:b7:75:2c:b4:
6d:23:5f:2a:fe:42:a5:cc:ee:d7:bd:86:be:f7:0a:ed:e9:99:
f3:ba:c6:46:9a:83:b7:83:05:a9:d5:d5:d3:c0:6a:ba:29:75:
f2:1b:5b:da:88:f1:41:03:e6:94:5d:a0:24:db:fc:7c:21:9d:
4d:2f:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:40 2025 by rpki-client