Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73ebaf21-7c17-3a88-b44c-d2e934b46463.roa
File: 73ebaf21-7c17-3a88-b44c-d2e934b46463.roa (raw, json)
Hash identifier: zgp8XgZTw+gerBARts9t6YOZK0Rt7j/xJK5JjCx126M=
Subject key identifier: EA:FF:6C:E2:04:C5:F0:DD:2D:39:CD:2A:35:1E:55:C8:1C:35:44:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DABE4E842A5F7BD609D9F8AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73ebaf21-7c17-3a88-b44c-d2e934b46463.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:e4:e8:42:a5:f7:bd:60:9d:9f:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=17ce30ba-e0d6-4bd9-b588-108d61a53a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:bc:e3:7e:6e:91:4c:af:b6:ec:59:64:da:
42:50:45:7f:f5:1a:21:d0:39:34:c3:13:b9:29:70:
ad:cb:67:d0:44:d2:b1:47:ac:cf:f3:cb:e1:b2:76:
78:9e:3e:3a:41:87:a6:66:7d:f2:a4:2f:71:cb:76:
fb:23:a8:09:97:1d:4e:42:51:87:c5:e5:93:d3:06:
ab:71:2f:a9:20:c5:10:ff:57:0f:8b:e6:3c:a0:14:
15:26:8d:a9:b1:84:da:ee:e2:62:3e:c8:e4:59:74:
3d:58:c1:d9:ad:74:1e:f1:fb:bb:10:f4:ba:12:e5:
48:d2:14:df:37:9a:5c:2e:c4:f3:9d:07:9a:fc:2c:
9e:5b:16:b5:07:43:e1:a9:e3:9c:b7:1b:a7:63:49:
9c:86:8a:50:be:80:d9:a8:ae:f3:15:b4:6d:22:7d:
f3:e3:aa:1c:6c:3e:30:62:c7:8b:c8:b7:3c:3f:4a:
b8:6c:88:42:10:91:ad:9f:12:62:c6:5c:9d:d8:4e:
70:0d:d6:58:33:3f:e3:b6:8a:0d:01:2d:eb:4c:bf:
35:15:4c:71:bb:ee:db:b7:ec:ba:7b:dd:7d:41:bd:
ed:44:5c:d5:25:a4:f0:87:aa:e9:ea:87:2f:20:48:
e8:09:25:70:28:26:87:46:1a:b3:a8:94:d9:b7:10:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:6C:E2:04:C5:F0:DD:2D:39:CD:2A:35:1E:55:C8:1C:35:44:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73ebaf21-7c17-3a88-b44c-d2e934b46463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d3:75:25:fb:b5:eb:d6:f0:49:3a:48:b3:83:b1:3d:e8:b4:
05:10:67:b3:21:73:c4:6e:b2:74:92:ba:f0:bb:79:8a:0e:78:
d4:10:e3:53:76:7d:73:7a:11:22:be:70:d7:ac:e9:d6:77:01:
25:55:40:4a:f4:01:43:65:bf:69:c4:61:f3:c7:6d:52:e2:84:
d7:0c:cb:88:05:71:67:3d:a5:ef:d4:55:10:dc:a2:da:ff:66:
08:71:6b:c5:1c:8c:13:b6:39:30:fb:9d:87:2b:b4:fd:db:d4:
01:e6:f2:2b:cd:cd:a0:22:8c:40:f5:54:d1:86:75:bf:8e:3c:
76:99:ce:5f:ea:23:d9:65:24:a9:56:64:a8:db:4a:bf:43:cb:
f4:36:46:1f:41:7c:75:3e:a5:48:2d:3e:b1:53:22:dc:ed:28:
b3:ed:05:dd:6c:7e:54:9d:0c:2a:1d:d7:96:c7:0b:6e:c9:87:
99:fe:ed:5a:7d:59:90:78:3d:94:1c:7a:86:83:16:92:a6:e5:
04:3d:68:f0:8c:a7:7c:0c:f0:7c:33:ca:c4:ab:ac:d3:c2:01:
5c:3d:8d:bf:fb:a9:5c:bb:b0:ab:1c:08:5e:b1:18:dc:97:8e:
8e:27:06:7e:b7:98:6f:bf:df:98:10:ab:60:3e:7f:03:a0:25:
69:a2:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:50 2025 by rpki-client