Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50583ed5-88c1-30cb-8ed2-b528f070bc37.roa
File: 50583ed5-88c1-30cb-8ed2-b528f070bc37.roa (raw, json)
Hash identifier: D63QG8dA7eHFbl6AfJzUl+7y3GnzHinxH+Q0G1Q/Wnw=
Subject key identifier: 06:3B:6B:55:BE:94:56:62:6B:AC:90:F6:AD:1F:E6:06:98:1B:52:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B6E3A1158EF4C7C6742C280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50583ed5-88c1-30cb-8ed2-b528f070bc37.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:6e:3a:11:58:ef:4c:7c:67:42:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=e80a92be-0e3f-466c-9cef-0892461808b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:1e:da:91:d6:9f:64:0b:00:d6:f9:a6:36:
bd:2a:a4:28:cd:02:70:5e:79:a1:1f:80:f2:49:2d:
07:93:93:94:7f:b9:9b:ba:ba:6b:a4:fe:49:90:9c:
98:c5:a3:7e:e0:47:2d:1a:d4:83:7b:de:ad:5a:f8:
03:f0:c9:9e:8e:3b:40:26:e3:0e:81:88:a2:02:17:
61:a2:05:30:09:f5:3e:95:41:f1:5b:53:c5:55:a2:
a3:c3:72:38:78:63:01:bd:c6:99:0b:ad:58:dd:ae:
4c:84:12:cf:12:37:40:5e:1e:84:53:65:44:03:0c:
82:6e:46:12:cf:fd:8f:e5:b6:a8:a1:4f:dc:35:46:
46:66:f8:02:c0:42:9c:bc:26:58:e6:39:31:c1:94:
0f:f4:5d:50:76:63:61:98:bf:84:7f:42:ff:bb:86:
a1:38:1d:da:6f:a3:e4:3f:67:56:07:47:86:5b:93:
1e:df:4e:ee:c2:68:6c:64:b8:30:a9:77:ed:23:c9:
32:a8:08:c1:57:4e:22:4c:c2:c1:62:6c:2a:d4:44:
8c:a9:1b:ff:54:53:bd:e3:2b:4d:97:d7:4e:a3:45:
a4:33:5d:3d:38:3d:c5:ec:90:39:bf:2d:d8:ca:3c:
19:ba:16:81:9d:8e:19:35:cc:12:17:a4:73:e3:9d:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:6B:55:BE:94:56:62:6B:AC:90:F6:AD:1F:E6:06:98:1B:52:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50583ed5-88c1-30cb-8ed2-b528f070bc37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d8:6d:84:41:0f:d5:c9:72:d7:bb:a1:97:65:af:12:f5:44:
ba:e2:a3:cc:fb:59:4b:88:64:ba:af:3f:c0:34:95:cc:ea:89:
7e:fc:8b:0f:4b:37:ba:2c:18:4c:6d:29:38:21:8e:5b:d3:ec:
95:44:62:1b:06:ac:09:25:8e:56:f5:c1:46:99:33:83:94:03:
54:2e:f1:89:ec:6b:5c:f8:f4:60:6c:ca:16:fa:13:d1:0a:e7:
ca:ae:41:c6:21:b8:f9:12:70:7c:b6:df:ac:43:60:38:ad:f3:
89:ac:6b:09:8b:c0:bf:87:f5:41:90:eb:63:e9:de:34:95:3e:
e1:37:e1:ed:46:a9:83:48:b0:df:f2:3e:f4:7a:92:a5:ab:26:
15:b8:f4:32:68:77:7f:45:b3:c8:c8:45:04:6c:6f:a3:85:50:
46:ea:51:28:d7:8a:af:4f:44:1b:33:55:29:bb:a8:2a:50:64:
73:18:59:9a:0a:ad:a4:9a:fa:4e:03:a3:1c:7e:07:10:37:31:
c1:86:21:6e:85:f5:1e:5e:23:69:c8:73:1c:f5:5f:6c:06:42:
19:30:c4:02:69:f6:27:20:f7:7a:21:78:32:7a:50:b4:2f:db:
f7:09:37:21:74:3a:d6:c6:57:20:ff:37:cb:bd:52:d7:1f:dc:
9b:a9:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:50 2025 by rpki-client