Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d3cb5a1-2ec2-3775-ab81-b18a287060c5.roa
File: 8d3cb5a1-2ec2-3775-ab81-b18a287060c5.roa (raw, json)
Hash identifier: GZDGds10vd9yoT9nkrioyRs9GXiMj2D6QIqf6R2lnrI=
Subject key identifier: A1:1C:2A:A4:05:37:50:F3:78:87:30:41:35:AB:97:D1:89:99:EC:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD5161C3CFBA878FEB933A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d3cb5a1-2ec2-3775-ab81-b18a287060c5.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:51:61:c3:cf:ba:87:8f:eb:93:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=6df753fd-2051-4ed4-a91a-cb9a2832fb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:b4:9c:49:f8:f7:3a:6d:37:09:62:67:17:
10:f2:49:1a:4e:67:06:6f:59:0c:97:86:c0:48:01:
8a:9b:ab:73:9e:bf:04:d2:ee:a6:99:63:b8:e2:86:
a9:99:d0:d2:c1:52:22:05:37:58:f4:a5:66:e4:ff:
a1:88:94:8c:55:67:17:fc:ce:2d:9c:44:bb:1a:5d:
81:4f:cd:fa:8d:29:ba:45:59:44:c7:74:96:66:30:
03:91:e1:9c:7a:6e:7d:b6:54:4e:17:2f:48:1c:0a:
d8:b8:54:64:9b:f1:55:03:db:cd:ff:72:23:f1:e8:
36:2a:6a:af:27:7e:90:21:b4:d9:10:a8:62:05:81:
6a:0b:cc:a0:b4:3f:50:9d:b8:35:8e:9b:a3:a0:0d:
92:28:20:dc:32:86:db:b0:ba:b9:95:c2:12:48:29:
c2:02:91:1c:63:5b:bf:04:b4:79:49:d9:fd:d1:ce:
6b:ec:4e:f3:dd:c1:e5:ea:02:76:1b:80:cb:58:1d:
4c:f0:f8:5e:3f:13:c7:23:8b:e9:f6:fa:27:ac:68:
9c:80:63:2d:87:25:62:95:ca:fc:ff:f1:1a:f9:56:
cc:51:dd:a1:e3:11:d2:10:b5:3b:fe:10:91:63:ff:
7f:3a:9a:54:db:16:6f:96:65:90:36:91:39:41:f2:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:2A:A4:05:37:50:F3:78:87:30:41:35:AB:97:D1:89:99:EC:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d3cb5a1-2ec2-3775-ab81-b18a287060c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:6d:c1:c1:10:33:15:0e:3d:cd:de:1d:5c:73:b6:81:5e:84:
12:cb:f6:f6:62:b2:97:64:a1:92:53:d4:a3:25:a2:fa:ea:f4:
83:c3:79:b4:54:0a:a5:83:0a:8b:71:0e:d5:b6:ed:d8:9e:37:
89:e2:05:65:2e:1e:02:f0:25:27:f5:e1:8e:8e:91:dc:be:01:
5d:c5:96:71:4c:89:38:16:7e:92:59:8b:4b:a3:41:b9:f1:d0:
e9:43:e0:5f:4a:34:8a:dd:9e:3c:1d:8c:3a:09:85:3b:90:f1:
e1:43:c0:9c:68:c8:da:49:71:7e:c0:ad:d9:23:38:a1:66:5f:
f5:6a:52:8e:79:fe:49:cc:6f:bf:ba:9f:fe:98:e2:01:ba:4c:
1b:47:c3:0f:94:d6:62:fb:5f:a2:90:dd:b5:26:0c:b1:d1:8b:
76:6c:d8:d3:d6:a0:6a:24:84:1f:d0:b3:d4:41:0a:ea:01:4b:
6a:f8:13:e0:74:9b:16:c8:da:af:db:ff:09:1d:01:51:ee:f3:
a3:c2:9c:dc:ae:ba:51:9e:9d:8a:fd:47:e6:c5:86:67:28:95:
f5:5a:a6:0a:0a:58:c5:d7:a7:fd:c7:2d:1b:f0:7a:2a:8b:14:
5f:4a:72:17:a1:d0:21:8c:5a:21:df:44:52:40:3e:9f:63:a6:
f1:d6:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:19 2025 by rpki-client