Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdded23-e19d-3667-9f13-76fad743fa80.roa
File: 7cdded23-e19d-3667-9f13-76fad743fa80.roa (raw, json)
Hash identifier: FeiDF3hDgGR1HUQUCT7DT35DWN3z+5knBd8p6j5HyS8=
Subject key identifier: C3:70:27:2C:C3:89:3F:F7:77:CB:2B:80:09:7F:60:8D:C5:8D:04:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0BE27DCE5FD6935D5C702EF8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdded23-e19d-3667-9f13-76fad743fa80.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:e2:7d:ce:5f:d6:93:5d:5c:70:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=ece18400-cd36-48ee-8e05-be7367d07e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:b7:34:ec:e6:ea:65:fe:dd:84:73:2c:b5:
6c:dd:0e:44:43:bc:d2:a2:37:99:3d:c2:50:cb:e4:
e5:5d:5f:92:11:40:53:13:69:71:0c:bd:71:15:44:
d8:26:67:6a:62:a0:81:0e:d4:37:7b:70:53:ec:34:
c6:cc:f1:a4:d7:a0:35:29:81:1a:36:01:b1:ca:90:
df:07:1f:da:e0:2f:83:43:b8:09:37:49:fe:4b:7b:
d5:c4:7d:53:28:da:cd:01:61:a4:b4:f7:0e:e4:63:
5d:88:85:35:d0:40:60:65:5a:9b:97:ff:ec:00:18:
7f:5b:b9:9f:1d:18:fe:00:13:0e:e3:b7:12:78:3d:
08:aa:a3:c7:25:4e:c5:8f:3d:b9:26:63:2f:8b:c4:
ad:88:62:a0:82:56:a0:a6:6e:c1:3e:c6:8a:7e:e2:
52:8b:54:9c:49:1b:ed:08:d8:21:3d:76:3a:d6:31:
86:53:e7:b7:a1:7f:2f:0e:89:bb:c5:e3:3d:f6:a8:
31:d5:b1:46:26:30:df:ec:61:53:84:1e:d8:89:a8:
d0:b1:69:5b:67:4a:64:b5:74:31:a7:11:fd:4a:c7:
cd:4b:b7:89:a4:28:35:44:80:62:f5:6b:57:92:d1:
5d:d1:6f:e7:6e:90:23:50:a8:6a:83:88:57:43:c8:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:27:2C:C3:89:3F:F7:77:CB:2B:80:09:7F:60:8D:C5:8D:04:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdded23-e19d-3667-9f13-76fad743fa80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e3:b2:cb:c8:1d:4d:81:86:0f:fb:95:3c:0f:0e:1f:ec:d6:
a1:f0:25:67:78:a9:f5:5e:53:fb:9a:7d:66:35:fc:0b:46:ab:
ab:4c:96:18:9d:a5:ea:bd:98:e6:a8:5d:b5:70:70:d0:69:e4:
0c:b6:83:50:72:52:95:d6:6e:e4:80:9b:a2:6d:dc:c7:9a:28:
a4:38:70:41:d3:ab:ee:a6:b4:f9:87:b9:8b:98:aa:f2:92:43:
ac:f8:4f:55:3b:21:05:29:e2:a1:27:3f:ab:95:87:2a:22:90:
60:6e:e2:2c:19:9e:1a:dc:9d:00:f8:22:32:76:77:d2:b3:2b:
d5:c4:d0:06:ab:fa:c6:81:fd:8b:cb:51:3d:f4:09:2e:3e:01:
60:43:b5:92:79:57:98:15:0b:b7:30:f3:6d:e1:4c:e8:78:2c:
96:c3:af:a3:df:11:c8:2e:b2:23:54:a1:12:23:b9:90:ea:3f:
26:7f:ac:85:fe:5e:02:fb:83:b7:93:5a:ac:28:e5:74:91:96:
0e:5a:14:d8:b3:e7:8a:35:e0:59:a5:81:16:00:9f:b1:29:3f:
b4:b9:cc:36:16:db:a9:73:7d:df:fb:3e:c1:b1:4e:6a:0d:d5:
7c:e4:fc:be:05:d1:a5:24:52:de:ea:67:91:2b:dd:8e:46:16:
3e:0d:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:54 2025 by rpki-client