Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/570b7f33-0134-32c0-ba9e-f6892f08dc70.roa
File: 570b7f33-0134-32c0-ba9e-f6892f08dc70.roa (raw, json)
Hash identifier: Qy8zx2h1jyPvbg3/d+w5gWY00l5Hb7MwJd78lE5nYv8=
Subject key identifier: BC:6C:1F:CB:73:3B:57:16:1D:58:9F:71:6A:1F:64:EE:B3:BD:13:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD1DD6A65099A6421C0D9F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/570b7f33-0134-32c0-ba9e-f6892f08dc70.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.104.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:1d:d6:a6:50:99:a6:42:1c:0d:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=e7feba4f-9bd1-4e2f-8509-74733c75cada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:8b:28:15:20:2b:ea:af:60:23:4a:14:79:
86:6c:8a:9c:76:4b:41:d0:69:83:92:ee:0c:29:39:
c0:11:f8:5d:ed:5e:9a:02:4c:7a:0e:ab:db:63:8a:
8b:c1:4b:d5:a8:cb:b1:8d:11:76:e6:27:1a:d6:ca:
57:be:ae:02:42:d2:e4:52:45:3e:94:3a:07:14:9a:
62:c9:12:35:a7:e2:a0:c9:42:64:32:a7:ca:07:12:
26:39:dc:fc:0d:1d:76:22:c6:fb:74:8a:2f:86:ba:
48:52:e8:0a:9b:e5:b4:a1:7c:b9:00:ec:d1:cb:45:
fd:eb:04:97:95:15:08:f7:96:1d:4d:60:35:34:83:
0d:39:49:51:8e:33:41:7d:56:f5:15:4d:69:47:e5:
a9:5a:9d:97:40:74:ff:b1:d2:0c:48:70:b0:ea:75:
fe:da:bd:88:19:0d:0a:81:ee:86:4a:0c:9c:49:52:
d2:69:a9:c0:7b:1a:9c:d5:01:31:21:98:e2:cd:c7:
2a:ee:f0:76:78:82:87:cc:73:c2:f8:76:d8:92:fc:
38:a2:a5:8f:fe:1a:46:e3:b7:ba:29:c6:ac:57:43:
c9:14:b2:4f:18:83:1f:b1:39:fe:4e:bb:50:ac:e0:
b5:de:5a:5a:9c:bf:f8:05:31:e1:f6:01:8f:e0:ba:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:1F:CB:73:3B:57:16:1D:58:9F:71:6A:1F:64:EE:B3:BD:13:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/570b7f33-0134-32c0-ba9e-f6892f08dc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.104.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:b1:cd:bd:a5:fb:c3:52:e0:53:cc:94:0d:4b:a4:fa:29:60:
38:b1:29:f9:cb:0e:aa:03:9d:8e:83:fc:24:16:a2:d7:b4:8c:
94:0f:00:24:28:29:5c:58:5f:2f:a6:44:3d:95:ec:9b:8e:1a:
23:eb:40:ca:44:2a:1f:ec:9d:92:d5:82:c6:9a:22:63:b5:f9:
92:2b:0d:8d:5e:d1:83:14:34:4c:71:9d:4f:db:86:a3:89:1c:
13:8d:76:ef:47:75:12:9c:0b:bf:5c:82:7e:79:3c:dc:f8:d4:
94:0c:e5:be:ed:0d:5a:c5:89:e3:bd:4b:14:30:75:10:cc:a1:
ca:68:b8:1e:ad:3d:cf:37:25:d7:a2:be:24:bb:9b:a4:96:8c:
3d:c4:8c:c0:42:0e:12:cc:2f:0f:28:0d:98:0d:d5:66:9a:a0:
29:b9:21:b9:a6:69:2d:a8:0e:ab:f9:8a:b5:66:d3:f3:0c:19:
7c:b0:d9:ae:99:c5:d3:a7:9b:6b:f7:e2:75:1c:f9:25:f1:f6:
67:50:92:13:38:c7:13:5f:5e:79:fb:ac:fa:34:79:6d:50:73:
65:a5:74:b5:27:e0:4f:1d:60:cc:5b:a7:93:8b:6c:9c:4e:94:
29:3c:22:27:ec:a9:74:cc:ee:82:e7:b2:19:2a:38:df:4f:31:
bd:4e:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:10 2025 by rpki-client