Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8254e868-0df1-3d9f-8fbf-289e5e060edf.roa
File: 8254e868-0df1-3d9f-8fbf-289e5e060edf.roa (raw, json)
Hash identifier: Jlgvvskckq+eHRyZURpwd7cAV0jGyC77SF+Cy9+Ud5U=
Subject key identifier: AE:63:BC:44:A8:FA:1D:73:83:DA:39:F1:D6:0B:C8:22:5B:B1:11:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E49991B02ADEEEE628FF00140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8254e868-0df1-3d9f-8fbf-289e5e060edf.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:99:1b:02:ad:ee:ee:62:8f:f0:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=91bc8a15-8b66-493f-a505-2161b6f2ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:79:3a:f6:e5:2e:96:ad:18:0b:06:dc:eb:
87:f2:be:ca:1b:07:51:29:55:f5:b7:0c:fc:4e:04:
20:88:96:4f:08:5a:5f:78:bb:29:dd:ab:6f:6b:0d:
d8:02:7e:56:ee:4a:e5:0a:ba:77:c5:8e:2d:c8:4a:
64:dc:bb:ea:1e:ee:61:63:3a:c4:64:6f:f4:ce:3a:
d8:fe:2f:cc:ee:29:8d:61:79:27:6d:c5:6d:ff:ed:
6e:af:b7:c2:60:32:4a:9d:15:2d:f1:d8:78:14:91:
35:90:70:3b:04:8d:69:54:87:fa:e4:f0:c5:37:cf:
92:a2:98:24:37:8e:99:1d:d7:da:1b:88:59:ae:6a:
57:27:00:a7:41:e5:0e:fa:4a:fb:e2:3c:c7:a4:18:
2a:3a:63:73:83:7a:f5:ba:b4:6f:a9:a3:63:b5:49:
d2:e4:3a:f2:e8:df:0b:d3:c1:75:4c:8e:fc:c1:be:
f4:93:a1:38:04:85:42:a6:30:b9:13:bd:4b:66:a0:
b7:fa:1d:06:b7:11:9c:cc:a8:da:e2:49:6c:71:9a:
b6:73:d7:4c:27:dc:f1:c1:dc:d5:b1:68:11:a9:45:
91:50:d7:ab:bc:d5:6b:5e:11:42:65:f1:10:79:c2:
d3:24:aa:b4:42:7f:3c:78:05:b2:ec:09:5c:df:74:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:BC:44:A8:FA:1D:73:83:DA:39:F1:D6:0B:C8:22:5B:B1:11:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8254e868-0df1-3d9f-8fbf-289e5e060edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:83:90:c5:ea:71:d0:9c:7e:45:05:14:c3:7c:b9:11:d4:83:
c4:b5:4e:eb:4b:23:d4:f7:08:d1:cb:c9:a8:5a:2b:5b:f2:99:
e2:50:1a:03:2f:60:88:59:a2:11:18:06:5c:81:e4:be:5c:65:
29:ab:67:8c:ad:9c:9f:e3:4b:38:11:8a:aa:15:2a:fa:3c:cb:
d0:6e:d6:6e:73:f9:f8:dd:e1:c7:8a:25:c6:cc:f4:d8:db:c9:
22:7f:72:70:ea:2e:34:9d:db:43:bf:c8:ef:ec:e9:16:de:f5:
85:16:fe:cc:57:65:53:d8:24:13:19:e9:fa:b0:f2:0d:4b:d7:
39:c3:96:f4:ec:3c:01:7d:9a:b8:e2:56:56:05:f5:b6:a5:e7:
64:18:42:5d:2c:89:aa:f6:83:81:92:01:19:40:99:3d:95:8b:
98:e3:63:29:ca:a3:02:86:cd:cf:2c:95:0b:d2:6c:94:7c:1b:
06:22:32:0e:04:9e:a1:4d:ab:9c:b1:a2:f7:7e:68:c7:a2:f1:
4a:f7:a8:6c:e4:ba:11:cb:0a:89:a8:7c:da:25:db:0a:64:31:
19:b2:c3:01:d1:bb:49:99:34:8d:65:2b:7e:ac:01:24:ae:ef:
ea:ab:9d:d2:33:cc:38:93:94:f0:85:86:85:62:9f:22:dd:62:
7a:ff:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:56 2025 by rpki-client