Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55ed9e8d-5eaa-39d9-bc38-56628969e81a.roa
File: 55ed9e8d-5eaa-39d9-bc38-56628969e81a.roa (raw, json)
Hash identifier: cQCiRXv7jrCdywrh4j5qJifKFYMHN9j0H6iT6LThbgg=
Subject key identifier: B1:17:6D:D1:16:B9:CD:D2:BF:F0:26:68:49:2D:46:72:8E:E6:89:D0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE42BBD8EB37C4B4D4D7D37C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55ed9e8d-5eaa-39d9-bc38-56628969e81a.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:2b:bd:8e:b3:7c:4b:4d:4d:7d:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=6a483d06-636f-488a-89dd-b1bf84b9c3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:57:d4:42:9a:fe:12:2f:e4:f3:f3:97:fc:
0b:6f:57:86:34:7a:1e:5f:38:84:fa:7b:aa:98:77:
e5:23:4f:fc:fd:33:31:62:c0:e8:38:32:78:dc:85:
fe:bb:b0:f4:24:c6:f9:85:a0:e5:ed:36:19:a9:35:
0c:f6:42:58:17:cc:aa:a0:75:b6:bd:89:06:d9:55:
f8:fc:c8:ed:54:21:b8:ba:cc:44:e6:ac:6e:4f:e0:
53:33:9d:9f:18:7c:35:e0:7c:5e:ef:91:3c:9b:1c:
a9:d6:27:c3:68:dc:32:00:35:a7:ec:0d:7a:21:3b:
c4:5a:1f:ed:66:00:a3:12:d6:1d:7a:5d:f0:ec:09:
be:14:3e:a8:66:23:cc:bb:fc:5f:77:d8:2f:c6:b7:
dd:91:a7:4f:55:e0:44:38:7e:a1:f2:63:87:7b:ad:
02:7c:34:32:ab:9c:8e:4f:c5:03:7f:27:b1:e3:c8:
d8:44:f9:bc:62:c1:3a:b4:f3:e9:11:11:69:ad:8d:
e3:16:83:ce:80:0b:f6:88:7a:39:5b:ea:93:98:ea:
d1:f3:eb:91:d1:5f:60:7d:7a:d1:ba:90:95:7f:17:
d4:fd:b8:24:b1:b5:e2:0f:eb:9b:76:4a:b5:78:81:
38:7f:09:6c:01:94:1d:b6:cb:aa:5b:38:0e:65:82:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:17:6D:D1:16:B9:CD:D2:BF:F0:26:68:49:2D:46:72:8E:E6:89:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55ed9e8d-5eaa-39d9-bc38-56628969e81a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:4b:5c:64:52:25:c8:f9:fc:06:2b:39:da:c1:4e:82:51:14:
9f:88:41:6e:83:a2:2b:a0:fc:d0:81:e2:c7:53:c3:a7:e9:71:
54:29:fa:54:b6:17:91:b7:20:ea:1a:ad:46:0d:03:3a:e3:44:
48:8f:54:ea:4e:30:7e:ed:46:63:f0:2e:33:af:c1:ee:fb:6d:
40:cd:ad:27:04:ce:e2:e4:45:e1:3a:a8:43:bf:81:18:b4:69:
c3:9e:ab:15:75:12:d0:06:65:16:e2:29:5e:7f:a2:03:4d:dd:
30:17:c7:53:c1:c7:2d:22:1e:32:d4:51:0d:f3:88:c8:f3:6e:
82:88:87:bd:87:77:4a:ca:1c:5a:8f:6d:d2:8a:ba:2a:b3:ae:
ac:dd:0e:9c:3a:89:b8:7c:26:a2:e6:14:f1:1d:5e:72:01:f3:
34:5f:07:e0:78:1c:c6:4e:45:38:8a:7e:44:b2:fd:f9:ec:12:
f8:80:c9:9b:b8:b4:95:3b:6d:fb:36:ec:02:39:ac:6b:55:b5:
73:7c:64:6a:6e:1b:5b:56:dc:19:b0:7b:fb:dc:7c:98:65:59:
01:c1:22:f0:a4:09:1a:56:0e:b0:47:0c:94:ee:ca:9a:62:96:
47:4d:dd:da:c2:d9:aa:4f:c2:5d:be:e2:07:8a:5f:08:3b:13:
9a:43:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:17 2025 by rpki-client