Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8772c5e2-8f0a-318b-af47-9a30b54342d8.roa
File: 8772c5e2-8f0a-318b-af47-9a30b54342d8.roa (raw, json)
Hash identifier: nSVul1ypSv3gp3QASdtWaeX90kKusUFbDOEnbPKRRcs=
Subject key identifier: 3A:5D:84:64:76:F2:E9:F3:E9:67:96:54:70:FE:32:F5:4C:B4:03:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5991FB295C5EBEC8F4AC9B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8772c5e2-8f0a-318b-af47-9a30b54342d8.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:91:fb:29:5c:5e:be:c8:f4:ac:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=55b56c24-c0e3-45a4-af90-dfad6ec958f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:aa:f6:6c:fe:c9:65:5d:52:d6:8b:bb:ab:
e9:34:be:43:69:3c:aa:98:e2:14:ce:3a:47:00:dc:
c5:98:3c:74:fe:b6:5c:df:a7:79:ef:9d:03:0a:00:
62:85:29:cc:18:a6:aa:b8:20:bd:dd:bc:06:57:d8:
81:1c:a1:c4:a8:2c:96:5c:54:d6:54:2e:97:2f:2f:
2d:aa:1e:5b:38:e6:ac:82:52:82:e7:27:a3:dd:47:
07:a3:14:26:d4:4d:e5:7c:5e:c2:51:61:3e:94:94:
37:bd:30:66:b9:ac:46:f6:5f:41:28:7f:bb:56:58:
bf:70:3b:d9:50:f4:a6:5a:f1:fc:c5:39:fc:f8:7b:
01:0b:c8:44:29:a5:73:18:03:37:3d:9c:1d:61:cb:
64:b7:f1:e8:ee:48:4e:aa:bd:aa:aa:06:e9:85:be:
d6:38:21:77:dc:f1:d9:4f:ef:9c:4c:5f:83:f6:48:
5a:9d:1b:29:01:c2:74:a0:0d:47:3c:de:63:0b:7b:
df:67:c1:8e:0c:d2:35:da:13:43:ae:ca:f2:e3:74:
90:7f:19:0c:e5:02:58:61:14:e7:11:4e:7b:63:27:
7c:93:63:a0:b4:b3:42:10:be:63:50:07:84:63:60:
b3:13:35:35:68:30:ca:61:c7:34:25:8c:c6:d4:6f:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:84:64:76:F2:E9:F3:E9:67:96:54:70:FE:32:F5:4C:B4:03:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8772c5e2-8f0a-318b-af47-9a30b54342d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.110.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:4e:06:d2:17:5b:aa:ad:19:d3:22:55:dd:49:52:a7:81:05:
00:ba:10:71:89:a6:5b:12:e7:ad:9d:5c:6c:f7:7c:32:69:45:
bb:e1:b9:45:1e:a6:9c:28:a6:f6:d4:fe:27:79:00:8f:1d:92:
7d:ff:12:2d:c0:86:13:f7:af:ca:9d:f3:e2:88:ce:15:35:2f:
10:98:f5:c3:30:0d:0f:1f:7f:ad:ef:be:ef:9f:49:7a:21:ac:
d4:40:d0:88:83:50:ff:2e:22:cd:8b:85:7e:0b:2e:8b:bd:1a:
ef:01:8a:b2:34:b7:36:77:e9:1a:22:a6:1a:dd:78:f0:ba:35:
74:d8:82:2b:b1:44:ef:71:99:c3:ad:b2:4f:16:48:67:69:0c:
8d:5a:85:c2:28:e4:71:7d:f5:bc:65:a8:9a:2d:70:ed:f4:7e:
f5:c6:37:0b:a9:43:50:0d:8f:97:90:e1:c2:7f:e2:2e:aa:30:
84:41:4d:8e:4f:9f:30:7c:9d:df:51:98:b2:b1:33:d2:42:f4:
22:0b:43:b8:18:c2:44:ed:56:2c:4d:4d:9c:cf:df:64:46:02:
e6:c1:2a:19:61:1d:d8:f9:e6:22:92:14:dd:52:0b:4a:ff:e9:
a4:59:99:48:e8:71:1d:e0:96:d0:e7:28:5d:06:a7:9d:0f:89:
f3:98:a9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:17 2025 by rpki-client