Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b19409b-1a3e-3694-aaff-9c6128399340.roa
File: 6b19409b-1a3e-3694-aaff-9c6128399340.roa (raw, json)
Hash identifier: rxGE8pm2CceAi4wR5/UoCTefxNcg19ciXGcX+PHGpSI=
Subject key identifier: F0:29:BC:D4:65:8F:F7:F7:57:B9:1E:DE:A0:03:3F:BE:E6:D4:44:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9745A44D66B27CE6C7E99220
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b19409b-1a3e-3694-aaff-9c6128399340.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:45:a4:4d:66:b2:7c:e6:c7:e9:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=925894e8-949d-4018-a6e1-92529d26d7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:33:57:09:a2:ca:af:a1:62:76:5a:cd:6e:
30:23:af:d9:56:9e:c0:01:f5:05:54:63:d3:f3:fe:
55:cb:36:af:14:27:ab:c7:d5:a2:10:09:06:e2:40:
38:86:b4:a3:83:64:6d:e0:7d:91:69:35:8c:22:54:
f8:c2:86:7e:67:fa:0f:5b:cb:1d:7b:25:36:25:28:
0e:33:16:10:de:96:1f:14:e0:e0:36:c0:ac:37:12:
e8:1d:a2:bc:7c:b6:d7:4f:82:1c:46:73:30:ff:32:
19:a3:5e:c9:c2:67:f6:2c:ae:da:84:32:f2:ff:58:
f4:2d:08:3b:7c:e8:a5:81:9f:ca:72:a2:9c:dc:b8:
60:cf:47:12:ba:e4:80:e2:11:ed:fd:33:f3:4d:4f:
43:c8:b9:36:4f:8f:a3:f9:36:bd:01:09:34:ea:08:
57:08:18:31:ae:05:4e:5e:4e:b8:72:88:de:83:85:
1d:3e:73:19:17:f3:d9:3a:09:9c:06:36:04:d3:c4:
74:24:fb:4c:df:5b:b2:a4:2e:eb:41:13:e9:e0:15:
a8:f1:d5:86:46:ee:78:b5:8b:3d:75:40:56:88:f1:
cb:d1:b8:8d:5b:81:6b:3a:a9:ff:2d:0d:e7:07:7a:
21:6d:67:40:d8:33:9d:a1:cb:e2:f9:fe:a4:d2:6e:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:BC:D4:65:8F:F7:F7:57:B9:1E:DE:A0:03:3F:BE:E6:D4:44:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b19409b-1a3e-3694-aaff-9c6128399340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:57:d2:8b:99:d5:dc:37:d1:30:4d:ca:1a:cb:83:71:9b:25:
54:79:4f:8f:d8:a3:4e:cd:b4:f4:89:a7:25:38:eb:3d:5b:a6:
76:40:4f:70:c0:45:42:52:c7:3d:cf:d0:b1:eb:38:04:90:d1:
b1:c3:46:9a:48:2b:7d:ed:17:b3:5a:b4:b6:f6:52:f5:5c:3d:
77:79:0a:4d:41:81:04:c0:28:67:f4:ff:37:9d:04:63:4b:3b:
a8:c2:14:b3:a4:80:47:97:e2:cf:7a:16:a4:2d:e5:60:f6:7c:
be:7f:7a:93:d6:c7:83:1e:b3:e4:17:69:a7:02:ea:68:f7:89:
68:93:e5:e2:08:e9:d6:e4:eb:8c:f8:4b:60:01:51:89:4e:32:
88:96:45:7b:72:f5:22:c5:a3:22:98:f5:c9:83:33:6e:d3:1e:
77:d1:b4:ad:8b:40:89:58:47:c0:5e:05:35:0b:19:fb:73:ff:
dd:4c:33:83:b8:50:7d:e0:25:ca:2e:95:e8:22:b5:3c:0c:b1:
ef:1f:bd:bf:0d:d5:25:97:e2:76:40:9b:9c:12:0e:97:cd:60:
a5:94:3f:8c:b1:ee:7e:21:e6:b9:4b:33:f6:d8:64:41:d2:91:
ed:f6:76:c6:4a:aa:19:6b:ca:71:7e:81:42:fa:f0:2e:1e:ef:
3f:ae:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:46 2025 by rpki-client