Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9060feb2-7b65-320a-8c45-cee2d6d6ee6a.roa
File: 9060feb2-7b65-320a-8c45-cee2d6d6ee6a.roa (raw, json)
Hash identifier: RRx0XnYN74lP8QV3dffPvGh9D8+1szXIWanSxFm8yrE=
Subject key identifier: 5C:36:7D:83:7A:7E:FF:FB:95:57:45:CB:73:4B:25:38:DD:38:78:DE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E215220517E04EDF9BD1C2430
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9060feb2-7b65-320a-8c45-cee2d6d6ee6a.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:52:20:51:7e:04:ed:f9:bd:1c:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=0f4724e1-39ba-4a32-ba32-df44f3ce04b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:e8:24:a4:59:01:80:3b:52:3a:07:0e:b6:
9b:24:98:fb:af:d2:e2:31:f3:04:7f:70:ce:ab:2f:
d1:d1:10:3b:75:fa:e3:e7:44:56:93:f9:0b:0b:80:
a2:b3:00:af:15:66:e7:fa:79:96:9e:f0:fb:fe:ba:
8f:a6:c8:1b:c5:a2:8a:12:6c:c0:39:51:90:0c:b8:
51:31:b1:2b:7c:dc:83:9a:47:40:02:78:55:c8:c2:
fa:38:3a:f8:8e:6b:72:a4:f7:56:dc:e1:b0:5c:69:
48:00:47:d0:d1:6f:2f:95:b3:ec:0f:25:6d:da:69:
cb:e6:cc:90:87:d3:86:f6:f9:d9:f9:b8:ea:89:40:
aa:c0:83:60:9e:75:8a:ec:f3:c1:89:92:a9:d0:72:
17:f6:38:38:3c:03:a7:d4:c2:75:45:e3:da:57:57:
f0:a2:92:1a:82:b2:08:0a:f3:a6:09:8b:0b:88:db:
f1:af:76:f3:2f:bf:a2:92:4d:8e:86:6e:88:17:b2:
66:01:10:d4:4e:c4:09:36:51:08:a5:7f:38:ba:eb:
eb:9e:61:89:a4:1a:3b:65:86:70:a2:4a:54:3d:14:
7a:7e:47:8b:3d:01:2c:09:8a:2a:d4:40:26:01:6c:
e4:ab:13:01:96:5c:ea:51:73:18:8c:1b:08:1e:0f:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:7D:83:7A:7E:FF:FB:95:57:45:CB:73:4B:25:38:DD:38:78:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9060feb2-7b65-320a-8c45-cee2d6d6ee6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:55:01:1e:16:97:c9:66:08:74:36:f1:88:8c:d3:ff:a3:d8:
05:82:b4:5f:2a:7d:28:9b:78:65:33:ef:9e:fa:57:38:ef:ec:
fb:77:50:e8:b7:cc:74:19:d0:fb:f0:b2:3c:60:c3:da:05:8a:
85:b3:d4:46:03:b6:9d:c6:33:31:bf:d2:bc:eb:b2:a7:f6:8d:
80:ff:e4:c9:47:d0:62:3c:69:a4:d2:70:52:f2:0d:70:f1:4e:
a8:7a:50:19:eb:aa:6d:d8:b8:83:a3:ca:ff:f6:86:ae:66:c8:
67:e3:e7:3b:bf:28:da:e0:c0:4c:37:52:05:22:f6:5e:ea:26:
f9:af:1e:db:52:05:54:0d:3d:81:20:96:3e:e5:12:39:81:68:
50:2d:ce:fe:48:20:9d:8b:5c:94:cc:fe:c9:65:fa:70:7f:e7:
f5:a7:39:b7:64:a5:0f:e4:26:d7:37:9e:ff:49:d7:61:1d:2e:
72:0a:fc:fd:7c:da:bf:7a:71:47:22:5c:a5:59:86:5f:b9:99:
00:15:31:9f:1c:45:f9:58:2d:cb:81:9c:ed:57:d5:fb:b9:68:
2c:ff:fb:77:11:7d:7d:39:6c:94:9b:20:8b:71:07:39:f0:86:
68:8c:f6:ba:e2:bc:4b:1c:6a:eb:3d:21:a2:de:93:b5:08:f4:
38:53:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:34 2025 by rpki-client