Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c290f2b-9ac4-3dec-afc0-8e319e366ba1.roa
File: 7c290f2b-9ac4-3dec-afc0-8e319e366ba1.roa (raw, json)
Hash identifier: IEnW/BO9lQEn/HWsflrQv8Ouk7VXIsnKwSVZBrU2d/Y=
Subject key identifier: B2:3E:D4:BD:9F:1B:5B:31:45:55:87:9C:9F:41:0C:B9:25:06:8A:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E97546BA0C7C0D5E817B58C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c290f2b-9ac4-3dec-afc0-8e319e366ba1.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:54:6b:a0:c7:c0:d5:e8:17:b5:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=d47c3a66-9b14-4c97-a9d0-a66596b2ed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:6a:3a:77:e8:66:b5:39:aa:84:3b:74:56:
bd:4b:ae:d0:2d:37:d5:b6:87:70:8e:72:ef:a7:27:
15:5f:f2:db:65:82:f6:0d:26:6c:79:c4:a8:b5:41:
ee:36:ab:c1:60:2c:54:5d:1e:d2:e4:ec:4b:33:07:
bb:11:93:dd:13:a7:7a:a5:e9:fa:1f:86:f0:1c:b1:
60:74:c2:15:83:e0:6a:1c:8c:fa:77:62:69:7e:09:
ae:12:46:c5:e0:42:94:02:7a:c8:5b:a8:2f:64:f8:
55:26:48:48:3e:d6:7e:b8:8a:b8:4e:87:af:22:b6:
01:6e:86:f4:ac:ab:8d:f9:d2:ca:be:04:8c:9b:ee:
7a:48:4f:08:19:e6:0f:25:47:0b:40:43:88:24:e9:
d3:ea:6d:78:fe:9e:d2:5e:3c:8a:36:2a:9a:50:cf:
4b:ab:c8:b2:eb:9f:4d:f0:48:94:cf:b1:bc:01:e4:
8e:57:54:c6:9b:af:e8:8c:0f:78:31:6f:8c:6e:1d:
da:a8:12:38:be:d4:f5:71:d2:77:dd:5f:be:8f:c3:
80:c9:ec:01:68:d6:74:e6:37:8e:e1:c8:18:3a:65:
86:46:33:c2:25:c6:bd:23:ca:06:72:4e:67:91:73:
0c:92:f6:37:24:ce:40:4c:02:52:b5:b2:ff:a7:af:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:D4:BD:9F:1B:5B:31:45:55:87:9C:9F:41:0C:B9:25:06:8A:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c290f2b-9ac4-3dec-afc0-8e319e366ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:de:23:14:23:83:77:02:8c:0a:1a:04:2a:14:34:ae:52:96:
26:17:33:c3:0c:57:da:32:f3:df:92:82:df:c9:69:76:a2:af:
5a:33:e3:bf:db:5c:48:ca:45:6e:22:df:01:24:ae:0f:8b:0e:
c0:ca:cf:cf:d0:fe:0d:64:08:bc:f2:99:a4:e8:61:26:de:7d:
45:d4:43:8b:56:23:1f:63:f0:6f:e4:6f:f7:c1:54:ee:1f:31:
1b:b3:69:9d:77:70:5e:92:3f:9c:d2:86:5e:f9:84:b4:3e:2f:
a3:a7:b8:7e:54:1b:a0:d3:99:32:84:4b:dd:92:0b:8e:bc:62:
07:53:bc:be:9b:e7:f1:9d:21:6e:31:ff:68:70:e0:07:81:3e:
17:07:2e:dd:b0:e4:99:56:31:59:be:d6:3e:01:15:ec:bc:50:
6d:22:c9:f0:73:88:fc:44:7a:84:ff:25:d4:f0:d1:ff:38:0f:
1f:7a:79:3e:cb:03:7f:be:75:58:28:c0:50:8f:bf:2d:3f:01:
5e:54:52:c1:c9:bd:25:d1:c3:37:f8:d2:b0:65:3d:fc:0d:57:
6c:60:06:5e:6d:35:a3:32:2d:70:1d:01:d5:f0:ff:c8:87:20:
63:ef:dd:b3:dd:61:03:1a:6c:03:81:5e:66:53:93:b1:9c:ee:
7f:c5:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:15 2025 by rpki-client