Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921df980-1ca6-3bf7-a2ad-3a4e5d26235d.roa
File: 921df980-1ca6-3bf7-a2ad-3a4e5d26235d.roa (raw, json)
Hash identifier: nTcmXTKGFofBXwwO4LcZRdihH5iWfmh56mzWnYpbtm8=
Subject key identifier: 58:D8:8F:7F:6E:E0:63:C9:AF:C6:8B:F9:73:72:15:68:0B:0C:B7:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F2211A07432484973F30900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921df980-1ca6-3bf7-a2ad-3a4e5d26235d.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:22:11:a0:74:32:48:49:73:f3:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=aa610a87-1301-456a-988c-5ce92e60c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:53:bc:6e:d3:2e:a0:25:20:1e:53:63:38:
b8:64:fb:ba:95:1f:01:28:22:0b:e3:97:04:a7:7f:
a4:42:69:44:04:10:50:78:06:61:63:2b:1e:c3:3d:
f4:b4:59:22:2c:84:33:21:8f:b3:cc:df:a5:57:3c:
6f:07:56:a0:4e:a2:5c:77:40:e3:db:7f:69:84:3c:
f5:fc:84:b8:f1:bc:f1:16:8d:55:d7:75:98:22:d5:
61:ce:7c:ce:9b:a2:43:38:89:9d:96:eb:80:13:0d:
44:57:fc:64:52:3c:d5:f2:df:35:12:cf:b1:ff:2d:
54:26:24:92:ac:87:08:1d:40:60:82:fe:19:d9:5e:
19:db:d8:70:c1:2c:6f:e5:42:65:e5:3e:6f:4f:70:
ba:ca:07:d0:ce:37:8b:0f:f9:00:2c:95:d1:10:45:
19:fc:6e:0c:4a:fa:72:fd:c1:0a:95:ce:8d:d8:45:
d0:ec:03:f5:dc:ba:c6:25:87:e4:31:fe:23:e4:e1:
ba:b1:ca:e9:9c:d8:d2:3a:f1:62:e7:90:83:5b:f0:
09:7c:9e:75:c2:4e:88:a4:58:df:85:b3:9b:23:2b:
7d:22:f3:57:ea:54:46:65:4b:d1:b8:74:7c:b1:ee:
f9:86:fb:f0:e6:00:51:83:51:05:ed:e7:ac:a8:e1:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:8F:7F:6E:E0:63:C9:AF:C6:8B:F9:73:72:15:68:0B:0C:B7:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921df980-1ca6-3bf7-a2ad-3a4e5d26235d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:43:4f:2a:48:36:82:a7:52:f3:33:4c:80:de:64:67:d0:7f:
bc:a3:58:3d:eb:d4:94:34:74:46:62:69:91:65:52:c9:8d:ae:
52:d8:64:ee:74:52:7d:51:af:51:f6:bc:4d:53:db:d7:70:f8:
1e:29:f6:1d:f0:19:05:6b:8e:6d:3c:22:1d:fd:89:96:c8:c3:
58:2d:01:55:38:0b:6c:da:97:28:ac:58:79:67:4e:de:bb:1b:
0d:00:83:42:d9:99:2c:7c:f8:19:a3:16:1b:43:a6:5a:21:91:
6c:31:d9:d7:47:dd:75:51:3a:1a:dd:cc:f4:b4:c1:fc:cd:fb:
f8:82:a2:f3:d2:42:2f:6e:56:81:7b:55:5c:1b:7c:5c:bc:a0:
cb:73:7a:82:ff:96:c4:38:d2:27:42:96:3d:64:da:30:7f:84:
42:1e:12:b7:bb:d5:b0:98:76:77:27:b3:0f:d4:99:59:67:2d:
e9:ff:9a:b8:bb:1c:03:fa:40:04:87:ff:27:be:b7:1a:c4:5b:
35:28:7c:f5:6e:cd:fc:f5:c8:41:b6:2f:64:e4:40:33:e1:ba:
60:b5:a1:ed:5e:07:c1:be:82:db:ca:6b:b2:9d:b7:f4:e2:a7:
1c:73:e6:b9:f8:81:33:6d:54:cc:9e:5e:51:81:ba:c9:21:71:
40:7b:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:18 2025 by rpki-client