Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f8ff0b4-8204-365d-9253-bcf88f1d33ac.roa
File: 5f8ff0b4-8204-365d-9253-bcf88f1d33ac.roa (raw, json)
Hash identifier: 1gwDnoHGvR+MVCOectKyO2T/JcqwgERSvm/ysdoaT7U=
Subject key identifier: 7C:FF:96:2A:DA:0D:CE:65:E7:50:EF:69:3C:D0:33:BF:85:56:A9:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B574A8496A41AB7059AB380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f8ff0b4-8204-365d-9253-bcf88f1d33ac.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:57:4a:84:96:a4:1a:b7:05:9a:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=7f2408c4-87c4-46de-b237-498d8f80b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:02:39:ab:2f:a8:01:61:9d:9a:0f:06:1c:
08:70:52:6a:6d:0d:d5:50:cd:f1:4b:4e:0c:8b:e8:
35:bb:81:05:bc:5d:6d:fd:66:86:94:d4:01:4f:db:
23:1e:33:61:c2:9d:82:09:e9:16:4f:6f:45:04:cf:
db:43:0c:70:07:7e:af:d4:a8:62:ff:69:6c:ee:33:
c7:0d:d7:5f:da:54:b4:a1:c0:25:8d:af:e6:2c:78:
6b:e5:35:4b:c5:98:42:41:2a:41:82:fc:7c:a5:26:
a6:54:aa:e4:d0:ab:20:49:18:c6:19:c5:f7:c8:6c:
14:6e:f7:84:b5:59:5c:a3:a4:79:29:bc:47:d1:a4:
9f:13:5f:56:89:53:ac:a5:f6:9d:86:56:34:46:d8:
bc:99:e4:e5:7b:0d:ea:d7:ee:85:ee:f4:7e:cc:ab:
52:97:41:3e:81:7b:5d:7b:8b:65:d6:2b:97:73:8f:
58:63:86:c9:e6:a6:ff:19:82:3f:e5:6e:b6:7d:6a:
9a:4e:0a:ad:53:fd:d8:7f:b7:2f:c9:87:56:c7:bb:
33:df:66:06:46:22:a3:2c:30:c5:6e:76:7e:ae:ff:
8c:c4:7b:2a:91:ab:ad:82:fe:11:1b:83:aa:de:43:
d7:0b:59:8d:5e:d4:1d:6f:4c:cb:69:67:26:34:04:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:96:2A:DA:0D:CE:65:E7:50:EF:69:3C:D0:33:BF:85:56:A9:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f8ff0b4-8204-365d-9253-bcf88f1d33ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:e2:b1:05:83:59:94:4a:52:94:43:90:a1:21:b3:e2:37:0b:
8e:4f:83:6d:b0:f4:f1:c3:c0:c9:cf:de:03:1b:68:23:5d:c2:
a6:9b:35:1d:6d:ee:d6:50:31:f0:f6:a1:bd:96:97:b0:70:7f:
f3:70:0e:cb:26:46:0b:56:f5:41:68:fc:3e:b7:3f:79:cb:ee:
56:77:57:d5:3a:48:d2:40:02:3e:16:d2:66:91:be:35:5e:9f:
5a:24:58:10:b2:fd:fc:43:25:c7:7d:a6:6c:7c:96:d8:23:c6:
f8:38:a8:78:b2:da:eb:f1:29:9b:de:e9:b7:ef:31:fd:84:02:
15:6c:bc:74:d1:ea:f3:cf:d8:47:d7:37:62:5a:79:5c:04:b9:
9a:60:e3:85:7d:15:72:17:21:bb:ea:b5:75:10:5b:de:e9:ae:
63:c4:11:87:96:bf:19:b2:71:bb:cc:db:65:7e:cf:a0:ae:61:
61:22:81:3b:1d:de:42:be:3d:d7:9d:ff:0e:9a:8f:86:d1:9c:
8f:ad:e8:fe:7f:38:f1:33:95:ae:28:fb:5f:18:d8:7b:d8:f5:
dc:0f:d8:c2:02:d0:49:34:cf:3e:88:c1:f3:da:23:87:7c:ae:
92:6e:14:68:9d:7e:2b:0b:80:ca:70:29:20:c0:6c:ff:1e:cc:
a7:b5:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:21 2025 by rpki-client