Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc75a5e-b950-3d90-b800-330b45887d1a.roa
File: 5dc75a5e-b950-3d90-b800-330b45887d1a.roa (raw, json)
Hash identifier: rrK0Ppwdvi1CeUdJRNUORwfdtdvY0511EOxtmuZ8YNE=
Subject key identifier: BE:C6:C2:9A:92:C5:A2:5B:56:E6:6C:37:D2:94:C3:8B:F5:95:91:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAC457BF7621E21C868FFFE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc75a5e-b950-3d90-b800-330b45887d1a.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:45:7b:f7:62:1e:21:c8:68:ff:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=0fc7f2c2-66ea-4292-a2d4-c1fd427fbdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:d3:cd:19:66:53:0a:42:db:48:f7:34:3f:
2a:07:13:51:fd:5c:d6:56:d0:7d:cd:98:3a:cd:4d:
63:40:1f:f3:42:bd:69:9f:1e:3d:e0:4b:35:8c:3c:
ad:5d:5a:50:8a:cd:29:89:97:48:90:6b:01:1e:0d:
bb:71:9d:c8:74:4b:3b:fb:d4:13:cd:32:f1:5b:68:
ba:f2:e6:06:c0:81:01:5a:89:09:1c:99:66:00:63:
5f:a8:29:88:a4:8e:be:99:ef:a7:14:d3:50:e6:f7:
14:ab:05:7b:62:61:91:0c:5e:80:06:8d:eb:cd:99:
5f:8e:65:b9:76:17:eb:7b:3a:a6:f2:e8:a2:50:96:
19:8c:6c:79:f9:d5:d0:b7:e6:2a:d0:c7:34:06:04:
a4:ed:c4:db:93:5a:49:6b:6b:8d:32:14:23:c5:13:
58:b7:02:be:f3:68:92:df:ea:3c:0a:7c:eb:e0:f4:
9a:6e:3d:85:68:2e:0d:f4:4c:12:3e:95:31:31:50:
9a:d8:ed:4f:d1:20:3d:9d:d1:c2:da:f7:59:2c:74:
be:83:fb:ac:46:4c:9e:66:ca:cf:55:36:5a:ff:28:
7d:25:da:51:4d:79:f7:86:02:47:50:e0:a5:ad:25:
9f:44:aa:57:3b:72:05:f3:f7:f6:9b:30:6a:c8:20:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:C2:9A:92:C5:A2:5B:56:E6:6C:37:D2:94:C3:8B:F5:95:91:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc75a5e-b950-3d90-b800-330b45887d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:8a:46:bc:d3:57:3e:9e:28:38:aa:15:5f:90:19:be:aa:4e:
1a:fc:a6:a7:af:08:ee:31:c0:0d:ba:f3:34:0b:6a:0a:66:cb:
01:ca:4f:32:d2:25:fa:86:2c:28:27:e0:ba:bf:0a:69:ac:8a:
bb:c5:a6:74:d4:40:c5:83:ec:33:38:a7:5b:6d:e2:ea:f4:27:
22:46:cb:d2:0e:df:ec:c7:30:ca:d3:3e:0b:ee:7b:f2:0a:c7:
45:02:ef:cd:a6:30:d6:35:03:0a:53:89:55:52:91:1a:18:e3:
53:24:8d:46:62:51:30:66:2b:22:37:57:81:79:2e:13:0d:40:
c7:b0:79:86:7d:79:d2:88:39:5e:b0:0a:ad:35:75:fd:02:34:
ab:9f:10:d4:a1:40:2f:b7:06:63:93:e9:10:88:27:a4:3e:49:
a4:05:d1:6e:ab:6f:5b:e0:bb:f9:71:1b:5a:1f:5d:14:5f:39:
e6:dc:0c:90:65:e8:8e:11:ab:d2:0f:e8:4e:91:e6:ba:bd:e6:
b4:14:0d:4a:df:d1:ce:df:68:ea:45:f4:fc:9f:48:60:79:32:
f5:06:26:f1:bf:c1:3d:ca:20:b4:7b:2a:b1:7c:df:2a:1b:a7:
13:56:29:2a:8c:be:c1:37:c5:5d:91:63:53:8f:c5:63:b0:87:
f7:18:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:16 2025 by rpki-client