Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9911cf-d384-3f88-824d-1fa33d5ceab3.roa
File: 8d9911cf-d384-3f88-824d-1fa33d5ceab3.roa (raw, json)
Hash identifier: MpN29P78fuqt5tcTLmX6c8V8+y15pWw72dcFIoflEm8=
Subject key identifier: AE:18:A0:41:4B:5C:B0:32:74:55:01:07:AA:EC:BA:B9:D3:DE:C5:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD2C4AE19638E39D51F22D44
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9911cf-d384-3f88-824d-1fa33d5ceab3.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.160.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:2c:4a:e1:96:38:e3:9d:51:f2:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=53fc4d09-fcd0-4e67-a60e-f17bf4063ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:dc:e7:eb:a0:34:25:dc:09:60:54:ed:84:
de:58:68:82:15:24:b0:e0:8d:e8:55:8f:be:af:5d:
e9:ee:33:2e:64:fa:00:f4:c4:7d:d3:ad:78:f1:77:
fe:3a:95:3c:94:40:e4:bc:74:eb:cc:11:c9:b9:e7:
f0:b6:51:b1:bb:2e:55:89:b2:ce:c4:77:fb:fc:55:
0f:ae:4a:49:f9:11:d2:3c:17:f4:e3:3e:03:06:70:
8f:59:5c:1b:06:e8:d3:a1:d1:c6:d4:35:32:51:03:
1e:04:95:8c:66:83:a8:7a:45:c1:b8:c5:27:f6:78:
8e:3b:69:ff:c9:c2:c2:35:2f:48:39:f3:8f:80:f6:
d6:4e:1f:b5:49:7a:ac:b0:7c:a6:d3:2b:f8:9c:44:
ff:49:b9:1a:18:0f:90:e5:b0:60:85:34:ef:cf:17:
85:6a:35:c1:f2:fb:23:b5:79:52:69:83:7d:f1:50:
b5:4a:4b:10:64:ee:be:87:e4:63:79:fa:4e:95:e1:
53:a8:c2:63:a8:35:43:e4:54:ab:8d:bc:80:b6:0a:
d3:04:83:0f:29:c5:3a:5e:13:26:5b:2b:6a:40:41:
6e:e0:9c:ea:50:a0:0c:1a:71:c1:04:d7:c5:e8:95:
c8:1a:29:e0:22:bf:6d:d3:21:29:ce:17:13:ea:aa:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:A0:41:4B:5C:B0:32:74:55:01:07:AA:EC:BA:B9:D3:DE:C5:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9911cf-d384-3f88-824d-1fa33d5ceab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:84:f0:26:fc:4d:93:33:9b:28:4e:7d:30:e4:5a:6b:4e:aa:
1e:6f:4c:77:d6:64:68:59:cf:c0:f0:52:0f:63:6e:92:f3:6e:
6b:d8:98:ae:d8:a6:6f:8a:c8:d5:59:cc:65:e0:6d:dc:b9:42:
a2:7a:9c:34:0a:8f:fb:a9:0b:cc:21:22:95:7a:79:04:06:19:
5e:37:3f:19:4b:07:20:7c:47:f9:42:61:7d:04:fd:a2:53:01:
bc:28:27:3b:d6:8b:a2:ff:5e:96:7b:f7:f3:9d:7b:f9:af:d7:
c3:2a:a7:30:6b:01:8c:8f:f1:40:72:61:27:d8:d6:ea:4e:53:
93:0a:27:a0:9d:2d:f1:f8:03:5d:05:b5:4e:47:60:fc:48:f9:
f9:5e:15:81:e0:81:49:4b:1a:df:74:e5:e8:1d:a7:69:7f:7a:
0c:50:00:8a:80:e5:88:21:d8:a4:49:0c:95:33:b9:1a:20:92:
52:4c:00:5a:8c:d2:cc:db:17:b8:e1:50:f0:b8:4b:24:60:16:
9c:38:6f:b0:28:c4:2c:a5:3a:29:0a:da:93:cd:27:20:c9:59:
71:71:56:5a:b7:9d:6a:2b:ca:65:10:18:29:4f:b5:70:08:1e:
4a:a1:f1:61:77:8a:f7:04:19:aa:43:fa:5a:d0:9e:3f:88:cd:
74:a3:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:22 2025 by rpki-client