Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52621e56-8cd6-3bf2-a18d-7d0efbc6e256.roa
File: 52621e56-8cd6-3bf2-a18d-7d0efbc6e256.roa (raw, json)
Hash identifier: ceEYr2BOUZEz5yicXwj+6qc/J3Muxaq4+DLe0jHUv4w=
Subject key identifier: 52:23:A4:EE:27:3C:DC:7F:88:A8:B6:D6:4F:D9:36:8B:E8:64:EF:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C8B49E02C4FBB84C64F9880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52621e56-8cd6-3bf2-a18d-7d0efbc6e256.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:8b:49:e0:2c:4f:bb:84:c6:4f:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=cee83ae7-970a-4a19-b2a4-55925bd786d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:a4:75:09:15:23:c2:eb:9b:01:30:51:18:
3b:8d:4e:5e:a6:90:bb:2e:e3:cf:3a:1b:ea:25:3d:
08:b4:a7:29:3e:9f:6d:70:ff:54:6a:ba:fc:97:af:
08:20:6a:36:22:c0:92:fa:46:8c:e3:bb:53:0e:12:
a4:38:35:95:a0:76:bd:5e:2e:8f:08:3e:ef:1c:49:
f8:51:51:44:31:f1:cc:5a:b7:d7:da:d0:fe:ac:39:
21:4d:db:f8:58:4f:ec:6f:b2:db:41:43:08:1e:8d:
0c:11:6f:a9:97:2b:43:5b:50:35:df:7d:80:67:29:
70:f7:19:4c:6b:86:ff:1b:b4:9b:33:99:cc:ee:da:
c6:24:b7:ec:21:a9:9a:de:be:1c:6b:2f:b8:60:32:
54:d4:39:b8:df:cb:1e:44:7c:9e:34:72:35:90:12:
8d:37:87:f6:d5:29:0b:8b:6f:03:07:a1:c4:0f:df:
7f:87:88:47:55:3e:62:64:2e:0d:59:10:81:fa:54:
f0:e8:bc:d8:b4:2e:98:5c:34:93:49:9e:a5:9d:26:
0f:94:2f:9f:42:e7:28:1d:13:c7:9f:87:32:3e:39:
91:62:d8:e2:10:d0:19:66:59:c6:11:d0:f3:c0:92:
7c:e1:a8:0d:f0:a2:bd:68:0d:80:58:d1:08:38:c9:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:A4:EE:27:3C:DC:7F:88:A8:B6:D6:4F:D9:36:8B:E8:64:EF:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52621e56-8cd6-3bf2-a18d-7d0efbc6e256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:16:84:af:61:bd:0d:d5:1b:a6:df:c4:f7:4a:d4:96:6a:d0:
10:8d:83:6b:26:42:ce:96:39:82:09:a6:98:94:0c:a7:20:59:
3f:de:6a:b2:36:ae:b8:23:be:d6:94:99:7b:6d:7d:4a:07:48:
4f:4f:82:65:22:9f:19:fa:05:6e:2d:4a:a8:d5:8b:ec:83:67:
03:0e:4d:7c:5f:30:1e:47:93:5c:ef:19:8c:cf:d1:5b:da:2b:
0f:71:f3:9d:7a:76:9f:56:cf:0b:e6:74:19:32:50:8c:7c:49:
5f:26:72:c9:53:59:22:3d:88:ae:b8:a3:e0:b3:db:17:05:92:
b4:84:d4:01:b1:d7:3a:35:fd:3e:b2:ab:4e:a8:90:80:ec:f5:
6c:c2:05:f1:dc:d6:22:b8:77:98:ac:f9:9a:f2:52:d6:a0:c0:
fc:86:b3:d0:1b:4a:30:fc:fe:3c:13:63:be:76:ba:f8:70:86:
3d:2b:60:50:06:1e:f6:73:d3:d7:db:87:00:f5:37:31:bc:11:
33:d3:b3:66:3a:aa:5c:40:ef:25:a5:9b:22:1b:9d:c5:63:42:
d6:c6:9f:33:52:c6:a0:c0:8e:8a:76:e0:d0:d3:91:e8:14:3a:
b7:8b:28:3d:2b:56:2c:12:e8:f9:b6:c9:52:e5:88:eb:10:60:
c0:bf:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:02 2025 by rpki-client