Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b9bdbd-2e22-35e9-b26c-3422780808d4.roa
File: 71b9bdbd-2e22-35e9-b26c-3422780808d4.roa (raw, json)
Hash identifier: DNeoTIvRCqpS4O9l/qrQe+s/2MMhuptOVuV6+K5aAZk=
Subject key identifier: 51:8C:57:A6:43:C6:66:8A:1C:E6:4F:3C:F3:5D:FC:A5:CF:7F:5D:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F803C6C4CA9E63D2D464F4870
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b9bdbd-2e22-35e9-b26c-3422780808d4.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:3c:6c:4c:a9:e6:3d:2d:46:4f:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=88afea33-f427-4953-b205-05a0ded45a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:8a:c5:8f:bf:b6:ac:db:86:2d:51:0b:b0:
79:aa:ed:a2:e7:22:16:ac:da:3e:f1:5b:9f:41:71:
7d:6e:ad:0d:06:64:d4:70:96:8e:74:5d:cf:0c:bf:
a5:e6:1c:f8:d2:f2:1e:5b:cf:cf:91:55:1d:6f:ed:
eb:e9:2d:19:86:f1:f0:1f:95:53:e9:54:c9:df:d0:
94:63:29:ff:57:03:53:91:1a:6b:11:ef:a8:8b:d5:
8c:64:b6:be:c7:1c:dd:14:47:0f:fe:21:73:6f:56:
07:48:b0:73:09:01:cc:14:a7:ea:a5:3f:3e:00:d9:
22:16:43:bf:10:73:02:2d:03:4c:8e:a4:40:17:cd:
8c:6d:22:70:22:84:21:19:47:65:1e:ac:f4:a1:e3:
4a:05:b7:5b:32:8a:89:c8:db:1e:5e:0d:66:41:8e:
e3:74:94:7c:3d:de:13:60:27:c9:8c:40:ed:14:4a:
21:34:72:25:1c:2a:53:20:d9:ec:17:03:de:63:78:
03:64:cb:8f:85:08:05:10:b4:f3:52:24:21:87:c4:
52:e6:2b:60:05:19:0c:9c:0c:89:19:2b:bd:c3:40:
f8:6b:47:2e:48:d6:5b:f5:13:b1:f1:cb:9f:c9:58:
fd:53:77:c8:fc:b0:31:f4:64:ee:ed:24:70:16:df:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:57:A6:43:C6:66:8A:1C:E6:4F:3C:F3:5D:FC:A5:CF:7F:5D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b9bdbd-2e22-35e9-b26c-3422780808d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ee:3e:6e:0b:5e:fe:e1:4a:15:73:c8:a0:8f:f8:b7:ab:9b:
36:15:63:24:64:8d:69:52:10:04:5d:53:7d:20:39:15:8a:28:
18:27:3d:74:da:39:c5:66:e7:f0:dd:4b:12:4f:79:3c:4b:5a:
21:99:07:6b:96:27:fb:23:2e:d3:96:3c:6d:57:42:91:31:52:
a6:65:42:ae:e6:58:25:05:c5:0e:9f:f2:ea:5f:52:0b:a9:b0:
e7:bd:fc:fd:3c:13:d2:f4:b0:8d:80:7b:7f:c7:5d:0f:19:f7:
18:96:c1:a9:76:bc:6f:98:85:29:26:c9:22:6d:55:d7:ac:92:
76:50:4d:8c:ae:59:d6:8d:a9:2e:a7:3a:a4:26:35:6b:d5:d2:
fd:af:a1:1a:5c:8d:95:d4:87:21:bb:83:e5:16:17:78:a2:13:
0a:44:12:c1:ae:46:f1:ca:10:4a:d2:fa:a9:31:1d:e6:75:71:
d4:1a:17:b0:87:ab:e5:58:6c:47:3b:52:99:af:f3:24:98:eb:
be:dc:ca:48:21:42:f0:22:a8:ba:9f:0f:3d:d8:38:df:7b:8a:
b8:56:d5:4f:e6:9c:40:70:7e:56:f6:d8:b3:1b:9a:c9:f8:22:
32:e6:15:ba:56:f4:d4:8d:2d:83:24:e8:bb:dd:40:cb:63:04:
7a:51:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:17 2025 by rpki-client