Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6dc8d9ae-3ef5-325c-a4eb-c064d0d7cf5b.roa
File: 6dc8d9ae-3ef5-325c-a4eb-c064d0d7cf5b.roa (raw, json)
Hash identifier: c8jCuHXP3+1m07cgyroyHf1Hl+fG0QxpWhGu9Hz+Eg0=
Subject key identifier: E1:E2:B2:E3:F5:6B:3C:FB:57:0F:E4:BE:69:1C:57:BF:55:78:F8:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F17757366B9B4C4BBBBE180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6dc8d9ae-3ef5-325c-a4eb-c064d0d7cf5b.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:17:75:73:66:b9:b4:c4:bb:bb:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=0c119fd4-b945-46eb-929a-de426ed8345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:fa:e6:6f:d6:59:32:b1:1f:a9:ce:fc:07:
ca:34:55:7f:ff:83:99:19:77:09:e9:ea:95:b9:1f:
c1:6a:79:0f:08:c7:d2:2c:d3:4f:af:7c:83:e5:15:
ba:23:f3:e1:31:41:d0:69:0c:cd:80:4e:e4:1a:6d:
f8:e6:72:53:ba:6a:ba:68:a6:66:b9:ee:56:dc:d3:
9e:0c:83:6b:a9:b4:fc:66:bb:f7:5c:fb:ff:81:0c:
56:68:6e:59:a3:49:ef:0e:2d:d4:01:3f:cb:eb:2a:
07:62:17:d7:af:c4:aa:7f:eb:57:00:a5:69:60:36:
d7:47:24:6f:53:01:d5:8a:1d:cb:59:7b:e2:cc:f2:
b6:e3:91:2f:69:ec:9f:7e:07:aa:25:cf:b8:2f:e4:
3e:1c:bb:a7:dc:57:75:fe:be:82:e2:90:ac:ba:c1:
1d:27:13:ed:0a:19:ea:ef:0b:bb:7b:99:70:ed:6d:
7a:a1:92:73:f6:13:ed:e5:83:35:63:46:c1:7e:10:
f3:12:fc:9b:b6:47:da:18:32:9e:69:f9:89:87:ec:
06:5d:17:ee:f5:bc:6c:59:9c:1c:4b:e8:50:0b:0f:
6f:e6:72:8f:ea:9f:e9:a6:a7:a3:51:05:3d:a4:67:
72:95:a0:6b:86:7a:d4:e3:67:28:93:24:11:57:d2:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:B2:E3:F5:6B:3C:FB:57:0F:E4:BE:69:1C:57:BF:55:78:F8:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6dc8d9ae-3ef5-325c-a4eb-c064d0d7cf5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:cc:62:51:00:24:37:ab:df:f9:72:2e:54:83:f0:6c:f9:92:
87:8a:a1:3f:db:86:40:4c:f4:f6:0c:35:5b:71:00:a8:52:e2:
9d:10:96:f2:11:e7:1f:eb:85:23:ea:69:06:ce:99:d5:b1:09:
40:3f:7e:39:15:de:01:2e:38:6f:16:19:5c:0a:49:76:6f:ba:
93:1f:d9:1d:57:65:54:a9:ac:de:99:e3:fc:73:74:bd:af:fa:
10:0a:18:2d:5a:c0:f7:e2:ad:ba:df:52:83:10:cc:2a:66:a6:
ec:e9:e1:43:9a:c2:8b:07:07:f5:c1:cb:4e:3a:46:45:35:e6:
0b:37:b1:c6:6b:1f:3d:40:b5:ad:c0:4a:54:5f:31:79:f3:63:
1d:30:da:1f:52:0b:e4:50:04:96:8c:01:39:94:cf:3e:73:57:
16:3e:eb:95:77:cc:52:9a:9e:c9:72:6c:de:e5:b4:a9:b7:bb:
f6:8e:6f:31:fc:47:5a:66:9e:06:67:18:50:b5:6f:ba:01:6c:
b1:6d:fc:37:35:28:59:93:7a:cd:bf:3f:15:fd:51:d4:92:d5:
bd:ea:ae:20:8e:04:81:4b:a7:81:c3:10:c8:2a:d6:71:51:e9:
42:25:cf:77:dd:64:74:81:92:3a:b5:71:fe:93:95:7b:a6:6d:
86:82:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:28 2025 by rpki-client