Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51f2230a-74c6-334f-b217-cc0e922fb584.roa
File: 51f2230a-74c6-334f-b217-cc0e922fb584.roa (raw, json)
Hash identifier: UQKq39HrGJ+c1pqCK91xpTg9I0rpIFWvh6lEotw71k8=
Subject key identifier: B3:1E:E2:62:87:D9:C6:EA:83:34:59:AF:20:31:8B:B1:1F:1B:40:70
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE424093FEED816B7194C9E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51f2230a-74c6-334f-b217-cc0e922fb584.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:24:09:3f:ee:d8:16:b7:19:4c:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=918dce1c-844a-44a3-a4e2-67c088f0be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:2d:bb:72:c1:d0:d8:dc:5b:5d:11:a0:4f:
af:41:82:83:5a:ab:30:7d:1f:66:88:e1:9c:8a:6e:
20:d9:b9:3b:c8:29:41:52:5f:5d:10:72:e8:01:0b:
7a:e1:bc:a6:e8:da:63:97:a9:ba:c6:8d:3a:93:7c:
a5:1b:fe:69:b4:b0:dd:f4:5a:4d:a5:f5:ab:0b:82:
91:e7:ea:8e:d2:f2:1c:80:3f:35:cc:5d:77:b6:ae:
aa:8d:8c:7f:14:10:e0:25:fa:2b:0c:c3:ff:5c:d2:
63:d0:a4:6a:99:5a:58:60:97:66:e1:8e:a7:5a:d7:
65:10:d0:cf:b1:20:44:bc:e2:19:2d:72:7e:9e:6c:
c4:50:c7:fb:b7:98:60:95:d7:88:b0:6d:81:9b:24:
c9:a6:12:51:17:02:aa:35:00:d0:f3:a4:3e:1e:ab:
51:dd:e1:90:43:34:1f:c5:f1:33:08:27:60:9c:d6:
ab:34:25:fc:2d:a9:b2:6f:d4:2e:0e:2a:c1:b3:3c:
eb:6d:ce:f8:76:ee:56:4e:cb:ae:e2:02:72:58:48:
53:cc:4c:3c:ca:3a:3d:6f:5f:42:7b:1a:b8:3c:05:
99:27:a1:71:b0:c2:0d:38:bc:c6:ab:27:93:f8:3f:
b1:d6:05:ae:46:1e:fe:eb:53:84:01:f2:94:55:d4:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:E2:62:87:D9:C6:EA:83:34:59:AF:20:31:8B:B1:1F:1B:40:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51f2230a-74c6-334f-b217-cc0e922fb584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:82:48:12:cb:3e:99:69:50:ee:41:4c:13:c0:3b:43:e0:2b:
75:e7:2c:b1:3e:fb:d7:ad:fd:e4:02:47:a1:92:a2:9f:f3:4a:
8a:c4:31:41:5c:cb:02:78:95:50:e7:40:8f:0f:df:29:ae:79:
bd:7a:ec:25:c8:02:e3:dd:10:db:e0:c1:72:20:e2:e4:ae:4d:
e0:67:dd:17:ed:f3:59:33:59:63:64:f4:57:c0:e4:24:a4:b5:
6a:d5:aa:11:eb:ba:54:2c:dd:42:24:0d:4f:06:f8:c8:6d:05:
ad:be:be:fb:d8:fa:8b:19:69:5c:86:14:f5:a3:9e:83:83:b0:
76:f5:a9:e4:f9:62:44:1b:9b:42:2b:3f:c6:5f:3d:48:eb:50:
e0:78:40:bb:5c:14:04:43:7b:0d:57:e5:f6:ab:34:12:6c:e5:
15:c8:8d:69:3c:ca:e1:00:f3:ca:ac:fa:e1:b4:de:b3:0b:4e:
bb:bb:f8:61:7c:62:88:8d:1c:8b:47:61:14:a1:ff:7f:11:2f:
72:f0:b0:8e:d8:3b:d6:c9:e1:e1:0d:b2:5c:22:66:10:5d:1c:
28:4b:42:e6:96:a5:73:85:d9:01:4c:4a:e1:7c:05:e3:51:50:
a4:eb:5c:56:56:a0:2a:54:a8:5d:c1:3f:39:ca:50:e3:91:3d:
1a:30:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:00 2025 by rpki-client