Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65f399fd-ffad-33e4-b9e7-7bf395a114be.roa
File: 65f399fd-ffad-33e4-b9e7-7bf395a114be.roa (raw, json)
Hash identifier: ASkUsWkbVjSDhe1ew6PueiqLKyZstET1R2XMgXqLA9E=
Subject key identifier: A5:34:C8:CD:27:BB:F0:42:F3:E7:53:43:68:15:70:FE:AE:70:E7:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C962D2E12B3236583BE3C8500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65f399fd-ffad-33e4-b9e7-7bf395a114be.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:2d:2e:12:b3:23:65:83:be:3c:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=7678f9c8-7e15-4052-939b-09eb7c9a4788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:5d:28:89:54:c2:9d:f0:41:09:9b:21:e0:
b2:61:27:12:de:79:69:4e:d3:cd:80:0f:16:10:f4:
7c:d2:1e:e3:6e:8a:9f:e2:26:54:19:1a:0f:47:2b:
25:d2:10:c1:48:99:d6:b1:d7:a6:fd:de:c3:ad:f6:
21:de:8d:91:c5:ba:be:4b:75:8e:19:9e:48:04:ca:
e4:7b:e8:92:d7:44:cc:d9:66:3d:68:62:48:1f:d5:
bb:74:77:eb:c2:b4:9e:4f:f2:56:34:ec:f2:ed:fb:
72:f3:5f:9c:3d:00:71:f0:b0:45:57:c9:fa:ce:50:
e2:94:f3:d2:95:80:41:37:98:cc:b0:5a:a6:ff:5f:
32:95:d4:22:07:88:55:2d:20:74:5b:fa:84:3b:4b:
32:5f:94:45:d0:fd:d1:30:c5:94:43:80:9b:f6:21:
76:30:a7:54:42:61:0d:04:27:2e:cf:2c:dc:b9:80:
df:1f:41:fc:9d:65:d8:37:56:22:ea:ef:b6:35:26:
e1:e8:4c:8a:34:89:af:28:35:1f:b5:46:af:47:92:
43:74:cd:46:9d:2e:16:f4:6c:1e:dc:97:67:a9:cd:
66:c2:63:78:12:46:de:57:75:31:22:f3:c8:24:44:
53:55:8b:ff:19:9e:d0:78:b5:71:78:7d:27:ea:c8:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:C8:CD:27:BB:F0:42:F3:E7:53:43:68:15:70:FE:AE:70:E7:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65f399fd-ffad-33e4-b9e7-7bf395a114be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:e3:7f:24:46:fa:d8:23:0b:4c:bc:16:52:a6:74:29:16:2e:
bf:db:12:3f:08:74:6c:bd:5e:21:6a:82:e0:05:34:ba:e0:7a:
05:3d:32:f5:e9:72:b0:8b:32:4f:a0:27:4a:88:3f:0e:e8:57:
ae:d5:4b:79:e7:66:d0:e0:66:29:b1:ab:f9:49:2e:80:8f:21:
ea:0d:1f:de:c8:22:f2:3e:c3:f2:a5:2b:bc:b2:c7:23:92:a1:
5b:33:8f:17:6d:a8:b7:ff:16:bb:34:68:fc:1c:70:84:07:41:
97:58:a8:ad:a4:48:c9:5d:65:9a:92:30:78:62:d2:69:e0:80:
b4:3d:14:da:5d:6a:8d:f7:1a:23:f2:fd:e4:39:70:61:fe:3b:
61:f9:80:22:0c:f5:ae:cc:93:f2:6f:9a:2d:f5:f3:ef:24:1f:
0b:98:ba:64:e8:4b:96:01:f6:b2:82:91:ac:b9:cd:fe:40:a9:
37:6d:52:af:75:99:18:6b:87:13:ef:95:e7:f1:61:e5:67:15:
af:2c:a9:11:5e:9c:10:de:ea:53:7c:03:ea:46:b7:e2:a1:10:
76:3f:05:e4:6f:af:4f:7c:6a:18:21:c4:7e:b4:58:c2:76:d1:
6a:f5:55:95:48:87:e7:c9:7d:0d:78:0a:7d:06:ac:fa:6d:da:
f7:68:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:33 2025 by rpki-client