Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad2b8fb-296d-3a37-87eb-c60308c653f3.roa
File: 5ad2b8fb-296d-3a37-87eb-c60308c653f3.roa (raw, json)
Hash identifier: gsepEHDXQHBIFQ248u1scJfwG9HY36oA4igWziPG95g=
Subject key identifier: 7F:56:C3:A3:13:A4:B5:3D:51:7C:70:13:31:EF:21:74:DB:18:50:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F107E1B02BE294B2B27D280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad2b8fb-296d-3a37-87eb-c60308c653f3.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:10:7e:1b:02:be:29:4b:2b:27:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=32848c3f-6796-4fdd-8975-c859adb22575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:e8:09:5e:9a:26:5a:6a:a8:94:76:a2:eb:
73:c1:7d:d3:6f:1a:e0:93:c3:b1:4a:53:7b:ad:78:
b6:f8:3d:8d:8c:80:eb:69:d0:c1:b8:a4:d0:27:cc:
82:05:a5:b7:8d:f3:ea:17:f6:57:11:34:31:f2:1e:
80:1d:04:5d:54:72:4d:28:7e:bf:16:b0:38:29:4f:
b4:de:c8:a6:cc:d0:19:32:46:6f:72:7f:66:60:f8:
3b:82:c0:63:98:fc:22:c9:98:34:1f:f1:9d:34:a2:
a2:62:50:13:11:94:55:b7:c9:1b:ea:a3:d2:2d:d5:
10:e0:3e:d5:83:0a:d0:98:4b:ef:3a:cc:56:81:a1:
f5:07:75:6b:e9:43:c5:05:20:56:0f:73:56:3f:97:
5b:fb:7d:49:90:26:40:fe:9d:af:9d:e1:13:82:9d:
5c:cf:07:a6:b0:2c:24:99:5a:f1:1c:6e:0f:25:32:
36:88:1f:07:1b:c1:0d:60:19:73:6c:a6:a0:d6:b8:
a3:c8:9b:b9:1b:3c:90:ba:12:0d:8e:0c:bb:80:34:
9e:c9:9f:2e:6d:16:14:46:e9:9f:af:8e:a5:bd:27:
ce:ec:5a:c6:97:89:9d:c5:0f:4e:3c:13:47:fa:62:
eb:13:31:87:8e:f5:50:7f:ea:fd:2b:50:1f:ef:57:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:56:C3:A3:13:A4:B5:3D:51:7C:70:13:31:EF:21:74:DB:18:50:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad2b8fb-296d-3a37-87eb-c60308c653f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:89:a8:0e:c3:61:e6:c1:25:ac:f8:90:0e:97:6a:8a:d9:e0:
72:c0:d8:90:26:15:1a:df:73:e7:92:85:0e:82:8b:67:df:5d:
6d:d7:f6:15:be:3a:d4:a9:37:38:6d:5a:53:3f:42:5e:63:74:
18:86:84:97:93:bd:3e:ba:95:f4:6e:22:79:47:e0:85:e5:74:
dc:ad:93:be:8f:3c:6b:a2:ee:a1:72:33:ba:81:5e:47:e7:02:
f5:07:69:ce:97:8e:cb:89:45:1a:82:5e:44:b9:8f:a5:2f:d2:
94:8b:fe:87:9c:4e:7c:b0:b1:a2:86:87:21:68:77:26:d4:38:
5c:8b:4d:f2:3a:d4:ea:0c:f0:88:59:86:dd:66:dd:fc:ee:cf:
7f:b7:5d:d9:55:30:df:10:dd:a0:33:8c:2c:78:61:c5:17:22:
a5:cf:c9:82:1d:df:86:9d:04:ff:31:7b:d2:b9:8a:1c:36:8b:
a5:d3:43:98:29:53:86:53:55:7c:58:59:75:e2:b4:88:b3:42:
d0:0b:0f:e5:85:7a:0d:b5:a1:90:d9:36:2b:24:a8:f9:22:a3:
ba:6d:87:ee:04:17:2a:40:35:42:42:8d:e3:1d:d1:7d:13:64:
fd:ac:ff:48:4f:ca:9a:7a:e9:ed:ef:31:8c:a4:4c:4c:ea:9b:
1a:b0:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:41 2025 by rpki-client