Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51fffa20-cad4-3c02-a124-57968e2181be.roa
File: 51fffa20-cad4-3c02-a124-57968e2181be.roa (raw, json)
Hash identifier: xlHnMbo7QhKw3ZwZeM4l5kRX0IWZA2fK7DMxZITPKRg=
Subject key identifier: FD:C3:02:A3:5C:55:16:CD:CC:46:5F:03:6F:0E:13:73:4F:7C:31:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCDD300322189541FD09414F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51fffa20-cad4-3c02-a124-57968e2181be.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:d3:00:32:21:89:54:1f:d0:94:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=526190b2-a13a-44d9-b470-c62e75f57b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:d8:46:45:85:1b:97:c9:ef:71:13:53:6b:
ee:97:0c:aa:de:12:f6:e6:07:b8:08:55:3b:8d:ab:
b8:b7:0e:22:01:1a:10:8b:52:b7:94:b5:5c:98:cc:
11:6a:8a:f5:39:ab:a5:fc:2c:78:f3:c0:9e:04:06:
5c:72:56:3c:d4:60:b7:66:15:e4:aa:e4:fe:0e:3a:
27:52:c2:b8:eb:6b:e6:30:57:05:50:95:99:88:de:
f0:22:68:27:7e:76:f2:29:8c:67:a5:5e:db:e9:fd:
de:68:50:81:00:08:4c:21:73:67:dc:64:14:fd:44:
0e:a1:b7:b1:4a:57:6a:4a:9a:97:a2:b8:58:b1:96:
8b:e6:98:16:bf:d1:17:a8:9b:b7:6b:24:ef:2d:93:
3a:e3:45:4b:f8:fa:aa:80:81:84:c7:23:0b:f6:25:
fc:24:3d:b7:84:f2:6e:d9:58:6d:07:b0:de:a4:1e:
a1:8c:c7:46:4e:e5:3c:be:f6:71:3a:2d:9e:ab:99:
2d:2b:67:ec:29:3d:65:be:04:8a:82:2d:f4:64:52:
4c:77:a3:ca:a9:b9:40:70:49:4d:3c:2c:98:2b:24:
c7:70:f3:08:7c:1b:a1:17:98:7f:df:05:c0:b3:64:
62:19:38:87:f9:ac:af:6e:d3:6e:f7:50:fa:00:d5:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:02:A3:5C:55:16:CD:CC:46:5F:03:6F:0E:13:73:4F:7C:31:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51fffa20-cad4-3c02-a124-57968e2181be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.244.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e1:c4:8f:33:f1:b7:89:ed:10:c0:36:75:84:89:27:76:65:
54:09:96:3d:31:ac:7d:5c:99:fd:fe:47:fb:be:b7:6f:24:dd:
c8:94:35:e2:ad:25:dd:99:23:a5:97:09:aa:69:17:49:46:66:
5c:1b:f0:0c:74:98:28:b5:c2:2c:75:09:cc:01:aa:99:d7:3d:
e5:be:40:65:52:71:e2:dc:2a:87:94:5a:2b:a9:af:b7:30:51:
68:ad:2c:24:ea:a4:49:ee:7d:8b:4b:f5:b4:52:80:22:a7:1a:
4d:62:01:18:63:6b:8c:aa:50:94:30:62:3b:3a:ec:96:cf:74:
85:7e:88:11:91:a1:89:2e:a0:ce:0e:87:5a:d7:33:cb:1f:d2:
ba:56:c3:be:90:b5:a1:3a:13:db:1f:f4:34:b3:84:de:50:07:
6e:e0:d1:74:a2:67:94:59:64:6d:64:11:52:db:dd:83:d7:97:
af:d7:cd:94:ef:2b:84:d6:c7:5a:ae:b4:14:78:13:7f:9b:2f:
49:6e:4b:89:d8:62:43:ee:9f:d9:ae:f1:1d:cc:aa:20:d9:77:
e0:23:6e:2a:42:58:cb:8f:e7:4f:9c:60:67:cb:1c:e0:97:b5:
81:1c:7d:b1:e3:b8:14:19:d5:1e:9d:9e:e3:3d:56:75:f7:3c:
16:c3:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:41 2025 by rpki-client