Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54ef291c-1df8-3f21-83f1-1430088d6935.roa
File: 54ef291c-1df8-3f21-83f1-1430088d6935.roa (raw, json)
Hash identifier: Lt0FMwPnkk9BNO5GtBDA135X0YbKcbvW2TAduGWjOqc=
Subject key identifier: 30:C7:4E:28:38:54:2C:FE:92:74:C0:82:FF:AD:63:98:CE:E3:5A:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE43A66FD3AC75ED6AFE06300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54ef291c-1df8-3f21-83f1-1430088d6935.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:3a:66:fd:3a:c7:5e:d6:af:e0:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=7beec7ec-3550-4a1b-807c-ec7ef2916425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:21:bf:32:36:a0:4c:ba:d3:0a:cb:79:5c:
ae:1b:dc:76:b4:f3:42:41:1c:3a:ed:8b:6e:8d:7e:
61:3b:6c:ab:cc:5e:b3:d9:31:79:7f:be:5e:5b:6e:
bf:44:60:bf:31:c3:d5:2f:f3:54:84:67:6a:61:10:
88:a5:17:b8:03:ad:89:70:d4:7e:19:ac:66:7a:df:
d6:84:85:7d:2a:17:97:6c:30:d0:3b:41:37:88:7f:
de:f4:26:24:4d:3b:4c:7e:8b:8d:75:c1:6b:41:9f:
f7:b7:c8:d4:6b:6d:15:aa:74:42:c1:f7:67:20:53:
4b:bd:93:b3:d9:0b:d6:34:d2:f8:0a:06:23:2e:a0:
cc:cb:1d:d2:38:a8:26:5e:97:98:21:e0:8d:43:c0:
48:47:8c:df:f7:b1:17:c8:79:a7:84:22:e2:21:ed:
e5:94:a1:6a:b8:9a:89:6e:e8:21:7a:23:df:9f:ea:
2f:ea:75:75:cf:73:79:52:6e:61:2a:38:76:5c:ba:
46:e8:66:11:bb:32:cf:67:a8:13:c0:d2:a2:29:49:
f0:f2:3c:82:e5:b2:c9:d0:b6:e9:39:56:9d:2e:f2:
5e:9c:f3:07:10:86:73:bc:82:5b:bd:42:19:6d:17:
d3:d1:ca:f2:ab:0e:89:5d:28:aa:bd:c3:15:18:f5:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C7:4E:28:38:54:2C:FE:92:74:C0:82:FF:AD:63:98:CE:E3:5A:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54ef291c-1df8-3f21-83f1-1430088d6935.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b9:b9:24:7d:14:7a:74:69:6f:3c:fb:20:55:64:03:da:9e:
47:ee:f3:a2:f6:16:33:4a:45:a4:3b:19:a4:57:0f:ed:6b:a3:
cb:1d:d3:8e:40:20:3b:b4:d6:95:7e:e8:21:63:fa:f7:0a:18:
c4:c6:62:c8:7b:59:75:f6:d6:67:72:51:b6:9b:ff:fc:a1:d1:
f3:1e:c1:62:f3:af:f8:a9:04:fa:ea:7d:e4:5e:48:7b:40:b3:
9b:d8:9d:bd:53:c3:81:3e:1f:e3:a9:3d:96:13:11:21:69:31:
64:4b:95:cd:16:26:34:62:17:b7:ce:df:8c:2a:85:ae:50:0a:
dd:ca:9a:84:cd:04:60:ad:ad:d6:69:2d:7a:a5:ca:fa:94:fd:
09:94:8d:56:73:95:ee:af:84:1f:25:ec:87:ce:36:66:35:f4:
52:66:9d:6c:51:de:af:ff:93:cc:63:25:dc:97:3d:c5:a0:1f:
6a:08:09:8a:2f:db:a4:69:bc:1c:d2:15:f3:84:82:d4:5c:6d:
f3:51:f5:2d:ec:0c:3c:24:07:ce:cc:89:f1:68:c1:71:57:47:
a4:d9:7e:d8:bb:58:de:3a:98:e1:f0:f0:ec:61:03:72:91:ec:
c5:d2:97:1f:3b:18:a4:f0:ae:b5:37:25:9a:5e:b7:1a:23:ac:
80:83:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:56 2025 by rpki-client