Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba4aa87-d805-3b14-bb93-9a9d28befce9.roa
File: 5ba4aa87-d805-3b14-bb93-9a9d28befce9.roa (raw, json)
Hash identifier: gTULkvr/76rHxE8tic+R67MoicTbuyM2Hfp50d8FyhI=
Subject key identifier: 54:06:43:CC:A1:6F:9A:80:9E:95:17:43:08:A3:25:18:6C:A6:A9:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE433EA39F5042C31208F5380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba4aa87-d805-3b14-bb93-9a9d28befce9.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:33:ea:39:f5:04:2c:31:20:8f:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=c1b73e18-7355-49a6-972e-5c32f92b1b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:97:62:e3:38:f2:bb:6e:7c:c5:1f:d7:5c:
68:07:ff:dc:5c:4b:48:1e:68:96:ae:25:71:53:b0:
30:cb:d0:90:f4:eb:d0:e4:79:19:a3:22:45:b2:4b:
12:b0:7d:5c:44:81:b5:4e:33:5f:91:da:02:15:a1:
ff:ca:4d:17:ce:b5:b8:0c:ed:60:a8:76:17:84:c4:
99:96:9f:9d:33:9f:6d:4f:f9:b1:70:52:24:75:07:
27:92:29:9f:10:27:75:dd:29:17:f4:36:cc:48:30:
98:cd:bb:9a:ec:9a:12:7a:15:bf:2d:3c:7f:4c:91:
d6:ab:09:05:82:60:f9:a4:cf:c5:0b:ce:1c:3e:ab:
16:9e:20:59:4d:99:7c:3d:f5:39:f0:24:02:06:aa:
47:66:4f:63:69:86:6c:d3:55:8c:1e:07:82:1e:45:
c7:e9:93:cd:22:56:4a:d0:c3:17:83:42:bf:f5:c5:
4f:18:36:be:ae:10:02:1c:39:a2:8b:31:8f:fd:ae:
b7:6f:dc:8e:ec:94:a8:92:21:4b:5d:ff:94:f0:de:
a3:a4:e3:22:0a:83:e6:d0:7c:90:3f:41:69:d8:c7:
54:97:3d:7a:91:c8:f0:31:1d:23:bf:8a:f7:92:92:
7b:fc:35:e0:f5:f1:6f:4b:fc:39:51:50:43:ec:af:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:43:CC:A1:6F:9A:80:9E:95:17:43:08:A3:25:18:6C:A6:A9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba4aa87-d805-3b14-bb93-9a9d28befce9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8b:b3:4f:3b:8e:ac:19:1d:04:ec:d7:61:c8:f2:cf:47:ef:
2d:4e:e8:ed:88:91:9a:88:92:8c:b7:f4:d8:09:6b:fe:5f:2c:
66:a3:dd:f7:e5:e0:ba:b8:d2:25:aa:72:70:d1:4c:ec:b5:8f:
51:a6:80:64:34:d0:fe:3a:21:e6:f0:34:d1:31:c6:e2:2d:d8:
19:9c:ab:96:5d:60:21:9d:bd:47:58:ea:ba:55:0d:7b:45:54:
d9:c6:37:a1:0d:37:6d:c0:7d:67:d2:92:62:7d:76:cc:a2:6f:
2c:96:0e:c9:2c:ae:4e:be:1b:d8:d0:c3:16:55:15:a6:d5:8a:
f3:84:64:1a:db:ab:ef:3e:7d:13:6c:09:8f:b1:7f:82:a4:8c:
ce:c4:66:62:fa:35:83:c3:8f:cd:b6:0b:b3:37:65:4d:86:d7:
8d:84:11:b6:fd:ca:58:21:42:b3:2e:18:c9:31:02:cf:c5:a4:
00:bf:f3:fe:1a:b0:40:53:58:96:c5:34:b9:fd:90:59:f5:60:
ec:af:eb:26:82:cf:db:35:e1:ec:9c:81:d2:42:1e:ab:e1:2e:
42:41:08:1a:34:fa:7f:54:65:99:c8:0c:1f:a9:12:55:89:72:
71:3a:29:0a:db:f0:8d:d4:6d:2a:dc:e0:33:05:b1:e3:1b:7b:
18:07:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:14 2025 by rpki-client