Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/666403db-bed0-31f5-9ae4-d7ac69868eb7.roa
File: 666403db-bed0-31f5-9ae4-d7ac69868eb7.roa (raw, json)
Hash identifier: mSQSeZdW2nPL9DgQb8mbCdSSHHNWrXqLnJ2tEP/XGes=
Subject key identifier: DF:00:35:CA:23:0E:EF:34:A5:13:42:FB:EE:B4:7F:48:D1:81:75:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59CD28399E4EC3A47D662360
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/666403db-bed0-31f5-9ae4-d7ac69868eb7.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:cd:28:39:9e:4e:c3:a4:7d:66:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=585cf8a1-9d3a-4c7d-bf0e-a2c98086293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:0b:4e:d2:fd:7c:88:5d:ce:cf:e2:a7:e9:
1c:71:fd:04:20:67:4b:e1:19:68:d6:2a:49:9e:fc:
58:af:d5:da:28:ed:6f:1b:92:a0:e7:77:5a:31:41:
06:04:d0:b1:f9:55:65:07:06:dd:3d:26:73:d6:1c:
95:67:bb:ae:81:56:10:30:06:17:82:4d:db:a9:57:
c3:cb:ea:42:64:3c:88:30:0a:92:96:8a:49:db:2c:
14:6a:d8:53:70:06:76:c9:11:b0:b8:2b:bd:17:a8:
db:c6:60:92:5b:97:33:35:b0:19:95:a6:c7:c2:34:
23:89:43:93:d4:55:9e:03:b5:6d:fa:8c:36:c0:e0:
82:87:64:b1:ad:a7:4b:92:be:5d:34:67:ac:ca:fc:
6d:90:fd:3d:15:1a:5f:46:f6:74:42:03:e1:d6:81:
47:ef:cd:18:26:a9:4d:fb:22:51:92:e2:30:33:9f:
46:03:49:7e:67:f3:5b:17:09:98:a1:d1:ad:55:d8:
4f:f1:2d:7b:81:e9:78:68:c5:ea:c3:8b:cb:7c:75:
8c:89:16:11:2a:64:2f:a4:bb:f2:f9:e2:19:3e:82:
66:f3:7f:25:9f:12:16:9a:c3:8a:22:7c:e6:3b:11:
07:e8:89:62:d4:34:2c:9e:a3:76:b9:24:52:12:a1:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:35:CA:23:0E:EF:34:A5:13:42:FB:EE:B4:7F:48:D1:81:75:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/666403db-bed0-31f5-9ae4-d7ac69868eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4f:5c:5f:a8:b3:d3:2c:ed:56:60:24:98:20:6c:51:23:ce:
57:fc:64:e3:95:7b:c3:ba:48:c8:2c:4b:83:62:60:2d:92:98:
e6:fd:8b:c5:92:9f:16:5a:34:66:fa:11:74:1a:19:c6:b9:d0:
d3:50:59:cd:50:b1:1e:d4:f5:b1:12:22:aa:ab:c7:c9:63:ab:
52:f0:7c:f7:67:f6:6b:a0:b2:0b:c4:75:45:91:e4:bc:4c:77:
30:ef:6e:b5:80:0e:a3:e4:ec:39:e8:f6:0e:d6:ba:c3:19:b9:
47:94:87:e6:32:36:cd:fa:35:b2:a8:30:41:5f:ba:fc:97:02:
31:cc:82:e2:eb:99:b0:79:cf:4c:09:90:4d:44:f5:41:22:af:
c1:e8:8b:1f:70:0e:05:ca:f0:f2:0e:72:76:c7:ea:68:6b:6e:
f0:3a:22:d3:2f:c5:3f:2a:93:ca:31:de:0f:ff:30:1e:1e:49:
3d:86:02:ae:b2:87:b7:15:9c:9a:75:f4:2b:8c:ba:d4:f5:73:
fa:7c:1f:19:76:87:24:87:60:67:4e:35:01:3d:06:d9:27:50:
8e:fd:04:e1:c5:51:73:e0:d1:e3:11:0b:4e:0b:76:eb:b3:c6:
59:ad:ad:2d:9a:98:92:b5:63:aa:c4:52:e6:34:2b:7a:9e:5e:
f5:ad:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:09 2025 by rpki-client