Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bf9821e-d06e-336f-87f3-94f84b48df84.roa
File: 7bf9821e-d06e-336f-87f3-94f84b48df84.roa (raw, json)
Hash identifier: QabWJ8u2X/cw4JLcaCJ2tIglOc5dXsHfQIEBI9lLuLM=
Subject key identifier: 53:01:0D:F2:DC:81:02:74:65:9F:86:1B:8C:4C:80:3E:6A:72:9D:23
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A76F872613BB5756CF45C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bf9821e-d06e-336f-87f3-94f84b48df84.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a7:6f:87:26:13:bb:57:56:cf:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ce619dcb-0686-4196-8fa1-2e75b7f5d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:37:c2:ad:7f:ff:d4:ff:dd:b5:51:6c:e8:
b5:0b:9c:04:9b:2d:7d:e3:a6:96:83:9b:e5:47:bd:
50:a0:e5:87:fb:24:20:50:c0:d5:14:91:8c:2a:47:
3b:bf:25:c0:d1:02:e3:2a:63:81:11:72:da:6c:11:
29:68:4f:c8:8e:62:39:1d:aa:5d:dd:0c:a3:4c:9c:
17:41:b5:43:07:11:e8:2d:f5:64:14:ed:06:fa:98:
3a:02:c2:88:c3:a2:df:7c:05:d0:3f:db:54:bd:68:
ae:b7:e7:f2:6a:c1:c0:ad:5b:cf:50:ab:0b:a6:c2:
fa:b6:53:ed:32:c5:60:d0:8b:aa:19:a6:a1:5a:67:
c1:5f:9e:39:1d:2e:be:6c:fc:75:ae:4f:71:ea:ef:
b3:2e:d2:06:2e:4f:cb:97:2a:49:22:5c:99:c9:74:
4b:c9:20:42:dc:fa:67:9e:9b:35:ca:c8:71:33:2b:
28:69:c4:06:f3:3a:73:8c:ec:32:22:38:f3:ed:3a:
4f:15:0f:6d:2a:92:db:48:1c:a9:40:3b:23:98:1b:
14:a1:05:b9:ca:11:38:4d:67:79:54:3b:44:cf:3b:
19:ae:5c:bc:7f:34:39:a5:14:47:07:29:e5:15:20:
08:db:15:7a:bc:00:5b:9a:5f:33:93:2d:16:98:f2:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:0D:F2:DC:81:02:74:65:9F:86:1B:8C:4C:80:3E:6A:72:9D:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bf9821e-d06e-336f-87f3-94f84b48df84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:90:c0:bc:de:a8:e0:97:2f:c6:2c:e0:f7:3c:2f:01:d6:55:
13:52:e2:11:b8:b1:53:db:6f:ef:93:a9:aa:05:7d:25:77:c9:
9a:2b:64:f4:f9:2a:bf:d1:74:c0:25:e6:55:30:72:62:08:a8:
f9:a2:d2:7a:3f:92:79:f0:d4:fb:93:f1:a5:88:a0:bc:7c:e0:
7a:eb:71:17:c1:d6:26:cd:cf:28:eb:9f:1c:32:9f:06:ab:91:
5c:0d:8b:c0:81:de:e9:2a:5f:65:c1:8a:ae:4e:dd:59:95:b2:
af:60:35:3d:7c:4e:a7:54:08:08:ad:9e:fd:5a:ba:0d:c9:7c:
93:9b:34:c8:18:0b:70:bb:7c:85:7f:40:10:74:c6:93:e9:a0:
2e:23:84:e1:3a:4f:c0:ad:52:1c:57:5e:ee:af:d2:cf:f0:f0:
16:66:50:ca:75:42:44:16:50:5e:2f:99:40:cb:b9:0c:7d:19:
06:8c:37:6e:92:fb:ef:59:34:f9:40:83:e2:dc:8f:1f:bb:89:
24:a0:7e:bb:cc:38:b6:60:66:4b:94:8b:9e:0f:c2:cc:fb:a8:
ee:06:9e:31:3b:1d:d2:80:16:a4:69:b5:2c:a2:b3:9f:2b:ea:
dd:a9:b4:9b:fd:40:e2:2e:88:0d:86:df:87:52:8e:d3:37:6e:
3c:8c:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:13:33 2025 by rpki-client