Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7b129c-0899-34f6-8ac2-a1201d5ceda3.roa
File: 9a7b129c-0899-34f6-8ac2-a1201d5ceda3.roa (raw, json)
Hash identifier: IzI+xRCSn2JccHMKoRBxoCahIUpNkRUaVBWhzFz3H7k=
Subject key identifier: F7:53:99:96:E6:9D:4A:29:CE:A9:38:5A:41:CD:2F:9A:10:7F:40:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0BE9FA76BE6FF4D41B3A6650
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7b129c-0899-34f6-8ac2-a1201d5ceda3.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:e9:fa:76:be:6f:f4:d4:1b:3a:66:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=96538f35-3386-4a05-bb1e-999ab7d92ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:7d:6e:39:f0:7e:7d:36:92:56:da:25:ba:
ad:e2:70:a3:f1:53:76:24:61:29:68:28:c6:f7:13:
93:ce:0a:b8:ee:ee:2c:ad:fa:63:20:8a:f9:5b:01:
c1:95:e3:c9:ca:c0:59:41:ae:71:e2:70:52:ed:c4:
3b:c1:24:f1:46:32:54:84:5e:cd:e8:de:5f:cd:bc:
b9:21:7e:65:bb:a5:e3:3b:4a:23:27:b2:5f:bd:13:
a2:63:d7:18:b9:60:6f:80:b2:f7:65:bc:e4:1a:29:
6c:94:be:23:bb:df:8b:87:71:a2:15:f2:d3:85:a0:
db:2d:be:55:02:ba:bc:41:8e:94:ff:13:f0:cd:4f:
65:89:63:bc:cd:ee:2f:c3:b2:d7:bf:97:f4:92:58:
3d:97:eb:59:a5:8d:cb:9a:01:2d:db:0c:3d:74:75:
0d:09:18:9b:ac:92:78:6b:85:94:41:1d:9b:3e:f5:
10:0b:19:85:d9:f6:bf:a4:12:9b:41:01:9c:48:10:
75:e6:cc:03:c0:71:22:56:01:d0:77:cb:c6:b4:b7:
29:28:a8:df:39:e8:fc:f6:7e:56:38:15:23:06:a9:
0c:61:7f:6f:bd:cd:42:6d:dd:38:8a:ab:90:05:bc:
d2:34:c6:ac:27:1e:52:2c:74:a2:1a:e3:66:4c:4c:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:99:96:E6:9D:4A:29:CE:A9:38:5A:41:CD:2F:9A:10:7F:40:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7b129c-0899-34f6-8ac2-a1201d5ceda3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:fe:a9:fd:38:a0:63:08:48:d2:7f:bc:da:63:10:48:22:ba:
f9:47:fa:13:e7:94:61:2d:82:9f:b2:76:8a:b7:e2:3b:9f:4d:
ad:42:47:ee:af:3b:3c:75:4b:6c:da:46:66:44:68:be:50:e3:
f9:b9:a3:b9:f9:26:8e:d9:3d:cb:9d:38:ac:4a:9f:8d:c1:b1:
d0:dd:16:68:4b:15:ab:c4:04:37:a2:28:86:ce:f4:96:9c:c0:
42:61:ed:77:ea:63:16:33:24:00:c8:5c:70:de:c3:b8:2b:3f:
42:df:70:82:3e:4e:c1:44:42:98:1a:2b:9b:dc:44:5c:09:2e:
c3:05:95:c8:57:1d:3c:76:7d:15:41:c3:36:17:15:0a:d8:3b:
6c:2d:c0:1a:ba:ad:54:22:5f:31:7b:78:43:55:2f:1e:28:73:
e6:80:80:5d:bb:a7:ee:ac:53:aa:55:1c:9b:11:af:12:16:1b:
bd:1e:d1:84:14:7c:99:dd:c7:58:79:85:1a:8d:d7:3c:05:ea:
75:96:3f:9a:eb:c5:bb:6c:dd:28:9a:ba:e1:78:f9:99:6f:fd:
eb:42:f6:e8:c9:4c:30:05:91:21:d2:5d:be:cb:1a:36:c6:40:
af:3c:df:1a:d0:7f:13:e6:ed:50:77:ac:72:ea:a1:79:47:c7:
69:d6:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:55 2025 by rpki-client