Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/679617b5-819b-3da6-b24b-588b396b60ef.roa
File: 679617b5-819b-3da6-b24b-588b396b60ef.roa (raw, json)
Hash identifier: KgFo0RNdPGsamYG4I70tjJ4oUsuZsn3GYHUC6AVZ75A=
Subject key identifier: 8C:EC:91:1B:79:12:2A:44:2E:C4:8C:4E:14:C4:BA:C9:72:B7:96:55
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F1077D17D3B7D082F8DDB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/679617b5-819b-3da6-b24b-588b396b60ef.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:10:77:d1:7d:3b:7d:08:2f:8d:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=a6b15530-d56d-49e7-a1cd-39429ea5a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:90:b0:56:c8:a1:4b:39:f6:2e:80:f3:c5:
c1:69:ce:1e:f1:60:36:7b:c4:ed:1b:87:c5:4f:e5:
90:72:36:fc:5e:a6:81:3b:12:2b:5c:c0:21:ec:03:
5d:db:2a:13:3d:6d:53:b0:26:3a:70:ff:36:36:7b:
00:4d:20:bf:2b:45:32:c8:09:84:06:54:2b:dc:4a:
43:63:4e:89:c4:e3:e7:29:01:f5:b7:8c:ea:e2:3e:
be:f0:be:a5:86:9d:3b:47:84:c5:11:f0:da:d3:70:
aa:08:f4:b6:22:1d:b3:d4:3f:1d:b4:a1:b9:46:aa:
b4:be:54:92:74:ec:8b:77:93:96:8b:e7:ac:bc:fa:
6f:bc:64:43:10:bf:83:63:ea:93:5f:bd:2d:90:4c:
d9:80:42:96:7a:b5:6c:16:ae:09:ec:0b:86:44:9b:
e1:28:70:88:1c:56:be:46:d1:00:dd:bb:ca:a3:d8:
0c:10:14:4d:49:2b:ce:57:ef:6e:4e:a8:4a:0f:4f:
64:a3:70:87:d5:4c:ae:fe:da:2a:66:a4:00:50:86:
ba:1e:d1:c4:31:c8:29:49:16:1c:e4:74:45:45:51:
a9:4b:2f:65:40:35:fb:80:48:e7:2e:3d:1d:50:57:
b7:8d:c1:52:92:ef:63:4c:68:ea:fd:c0:ff:53:a2:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:91:1B:79:12:2A:44:2E:C4:8C:4E:14:C4:BA:C9:72:B7:96:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/679617b5-819b-3da6-b24b-588b396b60ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ed:c8:0a:04:cf:f9:fb:40:9b:01:33:71:fa:25:00:35:26:
2b:9c:24:b7:35:d6:63:61:8f:19:0d:f0:f2:de:e3:23:bb:84:
48:79:0a:1e:42:43:7c:fc:53:63:17:eb:12:d8:ce:56:79:bd:
14:19:b1:88:17:3d:35:f1:14:ff:79:07:33:29:30:d4:67:95:
af:1b:4e:ab:af:d8:a1:f6:fc:4f:a1:75:73:b7:18:84:24:d7:
fc:61:f9:6f:bb:70:5c:7d:0e:73:82:d8:dc:5d:fd:c5:be:3d:
4b:ad:33:b9:7d:7c:16:fc:fa:c3:2d:9a:9d:7c:8c:52:c2:8f:
9d:e2:24:e1:fb:08:bf:df:83:43:72:3d:54:94:9d:96:7a:05:
d0:c6:46:55:d7:9b:58:5e:d1:d0:84:c8:41:93:89:ed:28:be:
21:2e:f7:15:38:24:3d:df:08:ec:8d:86:3b:05:1b:90:9a:5c:
27:b4:76:c4:b2:52:0b:79:63:4b:1d:c3:bc:80:5d:49:48:9a:
10:0c:de:bb:c1:f4:d8:ca:fc:e3:68:28:cb:70:50:59:36:86:
ad:d9:e7:4b:99:73:ea:54:b3:5d:5e:2a:d0:76:30:52:4d:a1:
e6:82:e9:af:36:61:af:14:b9:66:2c:fc:b3:5e:06:ab:0b:51:
2e:bc:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:19 2025 by rpki-client