Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92874f45-9e99-3f2c-952f-9da8a4c910c2.roa
File: 92874f45-9e99-3f2c-952f-9da8a4c910c2.roa (raw, json)
Hash identifier: KLJ20KXMpT50Dv1Dhj9ZTBKNFbLUEQwhmc0KZt7aSaw=
Subject key identifier: CA:93:79:CF:BD:9B:9E:0D:DC:14:53:0D:1F:CC:6D:FF:A6:02:6B:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95D34BCCEAB436407DFAAFB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92874f45-9e99-3f2c-952f-9da8a4c910c2.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:d3:4b:cc:ea:b4:36:40:7d:fa:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=1df2e32c-ced9-440b-ba77-79007f381894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:98:8e:88:c6:de:ef:f7:ca:67:bc:8e:d0:
b1:d8:5e:a1:42:40:b7:70:f0:50:41:05:e0:10:e6:
0b:d7:dc:30:9c:f6:71:1e:76:6d:fc:97:96:86:b8:
f3:c5:f5:d3:9a:9d:e1:10:20:79:1d:a1:ba:4c:6d:
22:66:e1:d5:0d:5c:bc:0e:82:30:0f:67:90:48:b6:
34:d5:46:75:17:0a:87:68:38:3d:0a:4d:e2:7c:6b:
e8:ec:c7:bc:07:eb:46:6a:ea:ae:30:98:53:76:21:
8c:81:11:eb:7e:6a:ef:35:e5:a9:31:2a:9c:30:93:
36:1f:22:80:41:76:54:97:a0:74:66:d9:6f:36:68:
4b:dc:d3:50:5d:b8:5f:05:da:ea:30:84:8d:bc:38:
fe:85:1b:39:71:9e:f3:4f:b1:e0:60:53:4d:4f:ff:
ff:b5:a6:ca:bf:5d:d2:90:1a:f7:67:9a:f4:78:3e:
be:41:81:27:2f:56:43:03:d0:65:df:c5:74:41:ef:
78:0d:19:71:c6:49:ec:e8:64:82:9a:36:14:69:f3:
e2:c9:49:e3:17:8a:80:13:f4:99:06:23:0b:dd:c7:
21:7d:b3:df:46:cc:f4:1c:b2:3f:dc:63:a7:f2:46:
fa:1d:fb:c7:46:dc:0d:5f:29:29:41:cb:31:a6:33:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:79:CF:BD:9B:9E:0D:DC:14:53:0D:1F:CC:6D:FF:A6:02:6B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92874f45-9e99-3f2c-952f-9da8a4c910c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:78:4c:c2:be:b5:b9:5a:7f:3a:d9:ac:de:11:2d:47:d8:1b:
03:d6:f5:f2:ac:d2:70:b5:0f:ed:73:62:92:2c:91:f9:36:c2:
c0:19:84:b7:32:b7:fa:4f:eb:4b:57:3b:f9:f0:91:39:1c:03:
f4:c6:3f:e1:61:97:4b:86:eb:78:15:cd:f0:ae:c8:da:98:29:
31:49:4d:8b:83:d3:fb:59:31:4c:38:63:1c:c0:ed:4c:28:a1:
85:b3:bc:0b:bf:5b:0a:d6:97:a2:ca:4e:b8:6e:8e:21:0c:ff:
41:10:28:46:3f:c8:96:68:96:61:f7:ec:f1:c8:cf:c4:b5:1a:
30:2c:ee:d0:bb:86:35:96:0e:6c:fa:86:d4:f0:39:b6:b6:88:
8a:98:bf:34:c5:c8:80:4e:88:8b:e9:a4:d3:16:8c:21:e8:f9:
75:bb:26:f2:33:42:77:06:5c:f0:bd:ee:1c:94:1a:f9:83:1a:
be:d1:41:55:a8:61:7d:f5:bd:71:fc:16:2e:9a:ef:35:cd:d9:
42:dd:9d:1c:94:eb:72:ff:1e:10:30:67:00:b4:67:93:e7:91:
91:8f:44:77:68:7f:ce:6b:9f:d6:da:12:74:78:31:37:e0:32:
b3:58:e0:23:22:f6:fc:2f:e7:71:f7:95:23:3b:88:05:b5:93:
b2:da:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:10:53 2025 by rpki-client