Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/864d7a9c-ba80-3f3a-a857-71deb96703bc.roa
File: 864d7a9c-ba80-3f3a-a857-71deb96703bc.roa (raw, json)
Hash identifier: qze1snAktj7fYfJWL4IIrNkDvsUxagYNI5sTE7HYphA=
Subject key identifier: 1E:C6:CC:2A:BA:32:75:B6:AE:C7:1F:1F:23:20:53:9D:FC:D5:D1:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2256B3B87ADEC20B6724D280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/864d7a9c-ba80-3f3a-a857-71deb96703bc.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:56:b3:b8:7a:de:c2:0b:67:24:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=9ffe891b-63c1-4eb9-ad8f-43b91e1317fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:36:2a:96:80:61:5c:d6:4b:b7:ff:88:17:
54:57:17:7a:2e:bb:8a:ed:da:ab:85:02:b4:75:fa:
53:97:ff:0c:b6:24:b1:7c:95:f9:8a:6b:b2:90:41:
dd:6a:44:88:96:c9:7c:79:32:01:f3:1b:c7:67:ed:
8b:de:b1:12:81:87:08:2c:a2:4a:f9:dc:ab:bd:13:
ea:ca:c3:dd:08:82:2b:e5:8f:ed:c9:d3:e9:3b:7c:
87:c3:e3:ee:41:28:cf:da:7e:f8:71:41:a7:aa:58:
07:1b:e3:e5:5a:05:da:be:e4:8f:78:27:a7:55:0e:
8a:17:68:46:31:11:14:99:97:11:89:8d:3a:88:57:
ac:00:03:95:a7:c1:8a:28:ab:ff:56:76:8d:62:b9:
c0:c8:55:0b:77:f3:bf:a8:fd:34:1a:d7:28:0a:0a:
52:a4:f0:56:dd:dc:65:bd:d3:d7:4b:1a:03:d2:ae:
16:eb:64:a8:d0:b2:c3:e1:8c:21:fb:78:5f:2b:df:
2b:5a:c9:89:86:54:b2:cd:40:b5:ec:2f:64:0e:9b:
54:a3:2f:66:d0:66:7e:66:14:cc:87:8c:95:3b:67:
97:da:3b:45:f8:35:b2:c8:1f:76:59:9c:26:2a:44:
4f:e6:9c:3c:e0:2c:6d:45:6d:b8:cb:40:ee:a9:a0:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:CC:2A:BA:32:75:B6:AE:C7:1F:1F:23:20:53:9D:FC:D5:D1:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/864d7a9c-ba80-3f3a-a857-71deb96703bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:6c:d1:44:a6:9e:76:f9:ac:e6:25:07:2b:67:e6:32:19:97:
a4:28:bc:f7:7c:3e:ae:2d:f9:81:cc:3c:83:14:84:48:02:c7:
a8:5a:d2:13:8d:39:39:32:72:26:3f:38:e9:aa:f6:cf:13:57:
46:99:79:b7:cd:61:87:83:0c:18:db:3f:e4:22:2f:4b:ab:13:
d3:9b:ac:a1:08:a3:36:bb:87:fe:94:c0:da:51:38:b2:5f:9b:
76:9d:04:23:b7:2b:47:21:8a:39:19:39:6e:03:bc:2c:48:be:
51:b3:7e:27:d4:ec:d0:55:43:da:82:b9:ad:83:b8:3d:8f:6d:
df:aa:ec:d1:c6:6f:17:c3:52:f5:b8:0f:74:b8:d4:47:27:d5:
c3:b3:ae:ec:75:98:06:2d:fe:ff:0f:9e:be:83:74:78:bc:39:
ba:90:de:3e:a1:61:15:c6:5c:bb:0a:43:0f:26:b6:23:31:06:
a9:e8:c7:44:ee:b3:b5:e1:80:96:48:63:f9:13:8d:bc:0b:c7:
28:1f:f7:33:f0:a3:4f:c0:0f:80:89:a4:a3:3f:24:b0:27:17:
4b:2d:0a:a1:cd:d6:bb:aa:2e:45:06:9c:31:0e:c6:89:da:b7:
b6:80:99:95:25:dc:8c:a6:84:c7:09:a6:29:58:d9:88:21:9a:
b2:85:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:36 2025 by rpki-client