Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6291140b-9f90-3bd8-baf9-6a1afd28741c.roa
File: 6291140b-9f90-3bd8-baf9-6a1afd28741c.roa (raw, json)
Hash identifier: qNb2NZY+REjTQjibMv1FB3HtEw6hRbzCac0zu+bj548=
Subject key identifier: 6A:FB:B5:5C:8C:37:1F:DF:99:91:36:74:9B:4A:DD:E8:2E:E5:9F:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59BDD06550418A866ECE3800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6291140b-9f90-3bd8-baf9-6a1afd28741c.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:bd:d0:65:50:41:8a:86:6e:ce:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=c8223e95-47dc-485f-859a-ff176b5e305b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:2d:bf:2c:1f:69:e9:01:00:a9:37:ca:dd:
c9:0d:f3:2f:f5:f7:b1:0a:3a:70:a9:d3:75:1a:e8:
e0:7d:ad:9f:a6:7f:f6:ce:20:ab:5b:be:3e:6c:7c:
93:e4:6a:69:fc:4f:2c:60:be:d9:92:9f:f4:e3:e5:
a2:e2:de:59:b6:09:d3:1c:c8:a5:2a:66:50:c1:de:
1b:6a:38:8a:0a:68:28:67:a3:15:8d:37:05:70:38:
97:6e:15:e1:36:07:e7:d2:69:83:ae:7c:e6:81:a4:
d7:90:04:d3:a3:ec:61:a9:3d:e4:cd:1d:26:b6:bf:
9f:a5:27:9e:a7:40:f8:59:01:98:fb:66:bd:0f:c3:
d0:36:76:ac:e2:28:9e:fc:ba:51:1a:9c:06:76:e7:
89:c4:91:09:31:5c:6f:51:d7:59:52:c9:5c:f1:0b:
08:23:f0:7b:87:93:e5:1a:07:10:69:09:fd:67:7c:
00:7f:12:be:64:31:21:72:90:2e:e2:bc:7a:38:eb:
c1:1b:11:63:d2:ca:68:79:89:22:1f:ff:6b:d7:61:
a7:3f:01:95:c4:02:14:f0:00:52:2e:3e:0d:57:f1:
fd:d9:0e:40:ac:b8:6b:79:60:55:5b:4a:a4:dc:5b:
a9:29:85:37:3f:94:9a:22:d6:2b:82:4e:23:9e:09:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:B5:5C:8C:37:1F:DF:99:91:36:74:9B:4A:DD:E8:2E:E5:9F:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6291140b-9f90-3bd8-baf9-6a1afd28741c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:2a:b0:14:e1:e9:e3:86:64:75:c4:88:f6:72:38:da:11:52:
4a:3a:2b:a9:3d:4c:34:51:63:fd:66:c3:49:d5:a6:a7:ef:b5:
2b:a2:4e:e5:b5:ad:35:7f:88:69:7e:9a:63:21:85:5a:f9:fd:
69:69:ce:66:3d:74:43:b8:8b:6a:f8:15:8c:12:16:29:ed:c4:
f6:29:ba:3d:c2:28:87:32:7d:05:c6:32:4d:0e:bb:94:48:bb:
71:77:44:bf:61:9a:fd:fb:df:6d:83:69:97:e8:09:4f:83:9a:
80:cb:bf:58:6f:14:3b:3b:07:7c:96:5e:69:40:d9:12:d6:4a:
f5:79:a3:a5:33:d7:06:fc:dc:0c:39:76:5d:16:25:12:8e:c5:
e4:8f:02:be:85:ad:bb:14:65:e0:28:2a:c4:d7:4c:e0:f7:74:
fa:91:12:93:d9:e7:64:dd:da:62:60:3b:a3:9b:04:75:02:0d:
3c:5f:f8:df:0f:94:e8:62:a7:ac:66:f3:49:c0:46:0b:8e:7c:
eb:08:82:2b:4d:08:59:15:bd:30:20:52:d4:98:45:f7:9c:79:
6f:fe:07:b3:75:bb:55:8e:7f:a2:c2:46:53:53:e6:07:3c:c2:
75:53:c2:6e:34:73:48:01:cb:80:ae:f8:d7:0d:53:88:5a:9a:
a8:9c:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:09 2025 by rpki-client