Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55587e06-e56a-3c1d-9a49-d87f11c344bb.roa
File: 55587e06-e56a-3c1d-9a49-d87f11c344bb.roa (raw, json)
Hash identifier: F09cu8lArvwFEIbhw9KSc0h9FnAefg9pKoRdQbvWkb4=
Subject key identifier: 75:42:EB:97:9E:22:E0:72:1F:4A:0B:69:96:A3:BD:13:5B:5E:F2:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B57A2FCFDA60601C0DB5000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55587e06-e56a-3c1d-9a49-d87f11c344bb.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:57:a2:fc:fd:a6:06:01:c0:db:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=c70bb435-1343-4ebc-94f9-8f0de9495c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:a2:df:e9:e4:2e:10:75:73:e1:08:80:c5:
9b:cb:03:61:89:0b:59:7c:bc:21:d7:a0:9c:56:0f:
13:47:0f:c4:d9:8f:10:59:ee:94:76:e7:65:af:a1:
3d:50:0d:11:a2:17:9c:7e:6f:9b:b2:4c:d0:2f:96:
59:e4:25:58:5c:ba:46:27:3c:23:89:0e:c2:6e:cd:
46:73:e7:1c:2c:1d:cc:0b:d5:44:6c:51:ea:6c:28:
20:db:b7:5d:a2:9b:a2:be:c9:af:3f:5a:f2:f7:cf:
c7:f9:0f:a9:d4:08:ae:bb:8e:aa:5b:5e:74:b3:cf:
91:c7:6d:b1:3c:69:0f:e1:e7:de:96:2a:70:8e:1d:
a6:a0:eb:74:9b:75:e3:57:d2:c7:8d:0e:6d:0a:55:
d2:2e:8b:a5:15:86:0e:7f:e4:24:7b:20:e4:c1:4d:
d5:ef:91:25:2b:bf:70:b7:02:45:a9:f5:cc:34:21:
3c:d4:13:eb:5a:c3:7d:7b:53:14:bc:ba:9f:09:66:
12:73:22:8b:04:7e:35:93:48:fe:3d:6a:9e:c0:9a:
b0:4d:26:8c:37:4f:2a:20:bf:55:03:73:4b:aa:4e:
6b:31:d4:5c:8e:a0:38:de:74:f2:88:2e:3f:03:16:
2c:cc:3d:9f:33:f0:33:38:15:40:0a:42:4d:19:1f:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:42:EB:97:9E:22:E0:72:1F:4A:0B:69:96:A3:BD:13:5B:5E:F2:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55587e06-e56a-3c1d-9a49-d87f11c344bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:98:72:8c:b6:17:6c:b2:01:e8:63:a7:b5:60:4a:56:64:e9:
52:6b:fb:39:e1:43:a2:9f:62:7f:d8:71:6d:c6:a4:be:b6:6b:
cd:f5:cd:eb:89:97:c6:b3:9f:61:98:b3:4b:79:83:09:88:3e:
bb:ee:00:ed:2f:1f:92:3e:77:a4:4d:8c:3f:62:2c:5f:e8:25:
17:66:df:b2:1d:c2:50:86:27:38:77:f0:0e:4c:a2:99:42:30:
76:d5:6c:de:59:66:b9:30:7a:c7:53:7e:b3:e1:7f:9c:87:48:
be:03:ab:32:88:61:7f:62:b6:ce:89:d2:55:17:57:23:b1:3b:
44:24:17:19:63:5b:a7:a5:1e:81:09:71:01:83:68:e1:f3:4f:
fc:b5:85:51:6b:ca:ea:5c:88:b9:b6:7a:bd:1c:c5:43:a3:1a:
ed:48:23:27:03:02:7d:d6:7a:21:ef:e2:e0:2f:62:d3:7a:b6:
17:65:e8:a3:ef:d2:cd:bc:34:d1:4d:94:5d:97:23:b4:71:1d:
cd:2a:a8:a4:41:d0:15:bc:cd:17:b0:01:a9:84:c5:c7:db:64:
b7:a3:67:0f:ad:01:15:7a:24:28:78:84:3c:cd:60:7c:db:2b:
e6:9e:fb:1f:7a:21:42:81:45:61:e8:08:48:c1:b3:6e:35:c8:
4d:0c:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:42 2025 by rpki-client