Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/654a5122-514b-3845-98d2-6aff630c679b.roa
File: 654a5122-514b-3845-98d2-6aff630c679b.roa (raw, json)
Hash identifier: 8hBXbhjWKy66nODyu3/jZ+sdH5/91gC5ObZ9VYKRSMw=
Subject key identifier: EA:8A:F1:E8:80:20:A8:01:CD:28:30:DD:BF:B5:18:83:B6:9E:7B:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5998BE87534AAB324F3900F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/654a5122-514b-3845-98d2-6aff630c679b.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:98:be:87:53:4a:ab:32:4f:39:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=08e96717-e3a3-4be9-bceb-003a88f63e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:a1:4a:c0:be:eb:f4:c6:39:92:c7:d0:66:
0f:50:5f:6d:87:47:93:c6:c8:98:15:32:17:a8:17:
fc:8a:85:37:0f:75:6f:98:ba:98:45:38:07:48:f9:
ef:af:02:3b:0e:de:a7:d7:6c:1e:96:86:0f:68:a5:
1b:09:31:96:d2:d5:14:7f:4e:52:f9:f7:a4:79:25:
1a:c8:5e:40:8e:03:ea:e3:e9:fb:52:54:99:f5:3d:
bd:a3:78:fc:95:99:08:57:c2:e2:5f:2c:a5:a0:1d:
26:37:97:e0:af:4b:52:71:ec:19:a1:50:16:f2:57:
c4:e9:4b:d9:e6:ec:0a:d8:fb:c4:42:c2:d2:a0:0a:
82:d8:50:2d:67:33:c8:d2:e5:97:13:a2:18:38:e8:
3a:36:76:77:73:09:9e:09:c5:b0:25:0c:2d:7b:44:
7a:cf:45:98:07:c1:ba:4c:4d:2e:7a:a0:3e:d0:d4:
3b:78:e3:96:08:71:69:6c:11:01:94:4f:b3:a0:b1:
70:2f:ed:ac:35:07:37:97:5f:a8:a3:88:a3:52:76:
ab:a0:13:8d:3e:de:91:5f:78:7e:54:af:a8:30:13:
2d:fc:af:99:70:8c:2a:fa:23:60:ff:f6:49:c7:72:
4f:94:55:7b:5b:ee:b3:bd:9a:77:a9:6d:a0:69:74:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:F1:E8:80:20:A8:01:CD:28:30:DD:BF:B5:18:83:B6:9E:7B:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/654a5122-514b-3845-98d2-6aff630c679b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f9:a7:bc:9c:b7:f4:c2:04:36:39:ac:6b:f1:3b:6c:20:14:
84:29:62:bf:3b:0f:a8:68:fa:bb:2e:81:0a:29:d4:99:dc:eb:
07:25:4e:71:15:0a:35:b6:91:cb:f5:f0:f6:96:b8:3e:64:12:
4a:a7:6b:82:5f:5b:47:59:8b:37:0e:e5:9b:8b:81:61:40:e0:
48:46:6a:71:c6:76:81:e0:18:a3:3e:fc:86:02:71:f5:61:66:
d0:42:d9:40:38:da:e9:fe:e6:af:2e:b8:80:d5:49:f0:8e:27:
0c:c2:cc:9b:d3:e6:05:1c:4c:ca:06:de:2f:3b:4d:6e:e2:d1:
cb:90:50:76:9b:fc:04:9d:2f:2b:93:a6:be:de:10:08:c9:85:
4a:50:56:f9:08:c2:65:de:d1:3b:ff:7c:aa:7a:13:8c:48:53:
ed:dc:ab:2f:2c:f7:b3:8e:65:95:df:4a:fc:00:19:60:79:3d:
16:3f:83:ee:8d:94:0c:a3:54:f8:35:b3:5e:50:5a:78:d2:48:
c9:ba:fc:26:0b:bd:01:c7:e5:5e:72:69:4a:98:0c:4f:6c:b4:
17:4a:9b:1a:9c:2e:b4:7e:38:e9:4e:9e:f9:01:5e:a2:b3:62:
6f:07:da:78:e0:f0:71:fa:ed:cc:97:4b:35:8d:31:fc:7f:fc:
95:50:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:38 2025 by rpki-client