Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53397220-8a3b-3be4-90dc-05a2225fa806.roa
File: 53397220-8a3b-3be4-90dc-05a2225fa806.roa (raw, json)
Hash identifier: POYXGxPuCJo4QZEuEPa02hceKGWYd7v2xv1DcC7DRww=
Subject key identifier: 1F:BE:E7:3E:16:D1:8A:82:D1:C0:5B:24:56:CD:23:4A:5F:04:B1:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EF21C836ABE450EE0849B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53397220-8a3b-3be4-90dc-05a2225fa806.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:f2:1c:83:6a:be:45:0e:e0:84:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=e60810b9-80d0-49f5-baba-146c6af79ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:37:fb:f2:d6:7b:14:45:e6:63:e2:c8:b7:
18:56:d7:ee:4d:80:19:14:b1:67:67:c9:b0:e3:0c:
bb:1e:92:0b:2a:c0:4e:8d:99:a1:50:39:45:e9:82:
8e:7a:99:ec:49:d9:08:f9:ca:88:2e:23:96:ba:da:
5b:00:82:cb:b2:b2:16:fd:37:d8:67:66:69:97:53:
63:6c:3f:4a:41:1c:de:7c:e7:8a:1b:1a:23:6f:bc:
2f:94:7c:62:1f:df:1d:cf:44:e9:4a:66:3e:af:8d:
65:7c:91:a0:f0:f4:a2:a7:72:df:74:c1:07:be:2a:
70:89:91:e3:cf:f9:8c:2c:b5:bf:64:ed:ad:b0:fb:
69:4c:70:f3:2b:3d:fc:a9:67:71:ac:a2:23:48:cf:
05:a7:cf:11:24:8c:f9:0b:0e:a2:3a:ab:c7:33:a2:
a3:6a:9b:7f:f1:82:03:c9:9c:46:a5:2c:5c:45:a2:
36:98:9f:83:b4:fa:41:ad:24:19:28:9d:82:58:7d:
5d:9f:f4:4f:dc:1c:8d:52:86:e8:f9:ef:b8:ad:e9:
aa:09:ad:2d:43:ea:ad:9c:36:fe:ec:7e:39:15:9d:
28:fd:e8:cd:28:11:38:7a:f0:6a:d3:ff:50:44:6b:
63:e1:dd:19:fe:7e:14:47:2c:fd:a3:f4:c3:e5:c5:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:E7:3E:16:D1:8A:82:D1:C0:5B:24:56:CD:23:4A:5F:04:B1:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53397220-8a3b-3be4-90dc-05a2225fa806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:53:76:0f:fe:ac:bb:a6:a6:cb:3a:6a:89:7b:95:0a:67:de:
f5:cf:f0:77:28:70:79:d7:18:e9:27:c8:52:0c:e8:42:e7:d6:
eb:ed:5b:23:ae:fe:44:3c:72:7c:87:fd:77:e5:c1:c7:66:1d:
fc:7f:37:3f:0a:2c:31:4e:a3:9e:93:fc:2f:7a:15:79:29:1e:
7c:15:7c:35:80:fe:df:b7:29:38:8a:cd:c0:9d:c5:ab:4d:fe:
87:7c:a9:e3:41:e0:39:19:42:80:ed:e0:ed:7d:2f:45:73:8b:
d0:16:8e:f5:bb:cb:aa:6b:6d:dd:bd:df:02:61:ad:71:a4:80:
b4:6c:01:5b:e4:87:9a:0d:4d:32:74:fd:1c:3f:65:8a:f6:55:
48:92:f4:b8:c5:6d:49:52:99:11:69:a3:25:0e:52:c2:f8:72:
ae:49:d7:52:84:ad:8e:89:ee:4e:85:4b:3e:f5:e8:8b:fe:3e:
25:a2:c6:2c:6c:84:fe:d6:50:ce:40:a3:f9:ac:8c:33:a6:9d:
de:4a:91:23:2f:d7:a4:b3:50:5f:d3:1d:03:09:0c:73:03:bd:
a1:37:e7:76:07:cd:40:94:69:12:2f:1e:dd:f9:9c:cc:21:8d:
b1:58:14:fb:66:d3:8a:a8:6a:bd:12:d0:eb:1a:6a:03:99:e3:
dd:10:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:59 2025 by rpki-client