Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70ba3445-af4c-3b8f-97b6-281a4208af88.roa
File: 70ba3445-af4c-3b8f-97b6-281a4208af88.roa (raw, json)
Hash identifier: KkmcJ9ul9YgTWsYlv1KZG353eueix91njKdXdlt+07Y=
Subject key identifier: 0B:28:CD:F8:82:A8:57:48:7D:2D:E0:92:40:28:DF:9A:62:97:6C:0D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32483739B32989B816654CD0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70ba3445-af4c-3b8f-97b6-281a4208af88.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.50.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:48:37:39:b3:29:89:b8:16:65:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c858a035-a7b4-4369-8112-25f7027517e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:67:df:12:7f:81:69:f0:4b:f4:9f:66:99:
43:19:0e:2d:7f:4d:7f:f6:be:da:38:c0:8d:8c:f2:
2b:15:9a:35:5c:0d:8f:a3:01:11:cc:49:f4:ee:6c:
ed:06:3e:8d:b1:dc:94:4b:46:bf:a6:e1:e1:68:65:
28:45:9c:55:47:4e:af:a2:df:09:d0:c8:60:4e:3c:
76:40:63:8c:90:4e:d7:1e:6e:3a:6c:54:dd:c3:19:
27:40:bd:c4:6a:78:71:23:af:63:79:8a:9a:86:6b:
8c:c3:27:dc:5e:14:97:0b:c7:4f:9c:c4:ef:9d:13:
d0:21:e2:0a:76:46:52:a6:8d:49:c9:24:b0:cc:ad:
34:33:98:f3:bf:54:bc:84:59:27:05:b6:b6:c5:a3:
a2:60:38:c2:ea:03:8a:54:45:bb:0e:59:9f:b5:cc:
6e:cc:55:5b:e6:89:80:11:ce:e8:80:2e:19:f5:88:
9a:79:f6:6f:6c:e0:63:97:8c:c9:ef:2c:0a:9f:1e:
a9:f2:aa:44:c8:cf:70:27:22:bd:e1:87:61:75:a0:
f6:1c:a1:b8:b7:b8:c4:b9:a3:06:8b:ff:1f:f9:08:
eb:c9:d2:d8:ca:9c:d5:f6:6f:98:68:6f:d0:68:fb:
3b:4e:87:df:6d:0d:01:58:e6:80:a5:f5:2d:93:da:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:28:CD:F8:82:A8:57:48:7D:2D:E0:92:40:28:DF:9A:62:97:6C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70ba3445-af4c-3b8f-97b6-281a4208af88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.50.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5e:07:21:c7:a0:7d:d3:a9:40:b4:f0:65:22:ba:e7:dc:a4:
c9:2b:e1:4b:a0:59:09:22:d1:bd:4e:77:6c:51:93:fe:1c:de:
07:72:b4:dc:9d:ef:88:26:5c:e8:3a:4f:ee:95:95:4b:8f:14:
b1:f2:a5:6c:9b:76:87:03:eb:f0:f7:10:6d:52:0b:91:5c:d2:
90:c0:a9:1f:8b:cc:fd:26:de:98:75:11:5a:04:5a:d1:5e:41:
85:ec:17:c2:24:2b:0b:90:4a:d0:ad:a9:e0:f8:69:75:6e:c1:
60:fb:6f:dc:86:2c:6f:64:11:40:28:81:f9:e5:ea:58:17:cc:
6e:5b:f6:aa:b4:5d:e4:f5:25:ca:f3:d3:69:9b:72:9d:6c:ff:
d0:ca:6c:2f:75:5f:b9:11:d8:f1:c4:40:a9:74:de:fa:87:45:
9b:c6:b5:70:c3:6a:bf:71:be:90:dc:28:13:8c:f5:5f:b2:ad:
57:7a:ef:55:77:0d:b6:7f:02:0e:84:d2:0b:43:4e:bb:dd:e7:
8d:0a:a8:93:c1:ea:88:aa:7c:49:73:e5:cb:20:de:a3:96:85:
e5:81:ea:b8:f1:ec:a0:43:c7:8b:4d:37:4d:98:1d:74:94:4d:
4c:ab:e4:b7:23:66:2c:8f:c4:ae:81:f4:1b:6a:ef:03:4f:af:
55:38:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:27 2025 by rpki-client