Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f09a5f9-aa42-3db4-9b4e-3ed1bc501ef3.roa
File: 4f09a5f9-aa42-3db4-9b4e-3ed1bc501ef3.roa (raw, json)
Hash identifier: LyhMBWw6Nwk70o9qxGn1yNPnKX0Z7+jln+FOv+MO00k=
Subject key identifier: 14:CE:8D:E1:99:57:5D:59:C3:56:C9:F0:02:F0:F1:D0:AB:E4:BC:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E48516FCF9CDB7DDED4BD3A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f09a5f9-aa42-3db4-9b4e-3ed1bc501ef3.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:51:6f:cf:9c:db:7d:de:d4:bd:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=2506390f-0076-4596-8afc-2cdb7dae6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:f7:d5:f2:8d:c2:e0:f6:e5:4b:c4:18:55:
08:29:2c:ce:8c:88:52:7a:ad:f3:55:9e:58:5b:3e:
01:96:f7:5e:d8:c1:25:84:91:91:9c:a0:1c:ea:1c:
4b:4b:56:28:52:d9:d4:73:83:f3:f9:ba:8d:e1:e5:
dd:ab:6b:f6:f7:0f:2a:85:b4:e4:62:11:e2:7a:2c:
0f:96:c9:ab:cd:d7:ea:25:69:2f:97:09:e5:9b:ae:
bd:17:c3:3b:ed:aa:8a:dc:ac:9c:29:92:e9:46:d2:
bd:d9:5d:2a:b2:a1:41:18:20:38:26:57:03:3a:d0:
ce:dd:3a:f2:fd:46:e7:81:85:ef:d7:12:24:23:db:
17:fe:26:65:da:f0:f5:59:a7:4d:9a:88:ae:1c:8a:
c0:90:64:ef:3e:c9:90:1d:86:1e:f6:79:84:cc:4e:
e3:e3:4b:71:88:d8:1c:c3:1c:80:de:0c:2b:97:96:
22:50:d8:ca:e5:89:7f:91:f0:b8:5c:8e:86:bb:83:
f9:8a:6c:69:da:6e:ee:c5:be:78:34:23:f7:8b:f4:
14:40:2d:0f:ca:11:c1:eb:79:b7:53:7f:c0:27:13:
e0:f2:82:ae:a4:22:27:56:07:c0:48:9d:45:e8:b6:
a7:31:b2:d7:4a:05:5d:ce:b7:26:1f:ef:84:ec:fe:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:8D:E1:99:57:5D:59:C3:56:C9:F0:02:F0:F1:D0:AB:E4:BC:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f09a5f9-aa42-3db4-9b4e-3ed1bc501ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:11:b2:6d:a9:ad:61:95:d3:f5:9b:70:10:17:4f:cf:31:80:
9d:a8:ff:85:be:b1:c5:52:2b:2e:af:e8:be:55:bd:1c:dd:d3:
04:77:30:64:d3:0f:65:d6:29:64:d0:74:af:94:68:41:a4:24:
05:bb:63:cb:c0:35:cf:eb:f6:71:a5:72:a6:f3:af:25:24:5d:
cd:88:01:4d:9e:01:e9:6a:9a:41:4a:31:87:72:df:3d:78:b5:
7b:16:a4:9b:23:0c:3d:a9:86:33:f1:69:78:1c:0a:e9:b7:52:
47:71:a2:8a:5d:09:fd:50:98:ee:6a:bf:4e:f7:32:65:63:af:
80:8a:8c:82:f2:c6:94:49:0d:6e:93:31:e2:13:11:97:91:d8:
d9:db:14:da:cf:52:5b:b2:dd:64:4d:e6:19:ac:7d:83:f5:92:
3f:b5:a8:14:89:0a:79:44:37:29:61:98:1b:36:56:18:83:99:
07:70:dd:e8:60:cb:1f:08:7f:f3:ff:13:2d:9b:db:95:ec:ea:
3d:f4:85:f6:07:e8:93:0c:09:c1:d5:45:54:6f:b3:6b:77:b0:
39:25:c9:e6:c9:e5:31:9b:d9:1f:7e:24:3c:6f:41:17:2f:eb:
bc:0f:aa:85:c7:9b:c0:b5:86:9f:5d:9f:fb:c9:5e:8d:67:a6:
c0:b7:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:44 2025 by rpki-client