Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d9262d3-2f36-3894-8f6b-c0f9b1122a77.roa
File: 9d9262d3-2f36-3894-8f6b-c0f9b1122a77.roa (raw, json)
Hash identifier: ig+WSh0nl4xtQrCLH2oci+bDrzXEgpdGom8fcJnBtjc=
Subject key identifier: CC:84:4D:D9:46:87:7A:EC:EC:57:F3:5B:C2:03:E2:24:6D:12:54:45
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6FED39438EC417A51076A940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d9262d3-2f36-3894-8f6b-c0f9b1122a77.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:ed:39:43:8e:c4:17:a5:10:76:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=4435db6e-4830-4b4f-9c7e-038bd0d13187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:9e:fb:94:2f:3a:d0:c8:ff:96:ef:ea:6b:
ed:ff:5d:56:bc:d5:5c:2e:92:ec:af:72:b6:fc:5d:
71:7b:63:6f:68:2a:03:fc:be:3f:50:f8:cf:ec:02:
7f:65:0d:f6:5f:f6:01:4d:04:ec:1a:0e:fe:b1:00:
53:65:18:d3:04:97:36:7e:93:99:83:92:e7:97:61:
5a:0f:7b:6d:25:a5:fa:98:b0:57:c4:c4:df:5f:dd:
6a:ac:da:2f:e3:61:4c:33:b0:43:1f:93:b1:74:39:
f8:55:4b:65:1c:82:b7:8f:62:0d:2d:88:40:33:a4:
8d:5d:d1:76:d0:eb:4e:9a:46:41:85:d4:67:be:9d:
4e:df:bb:e8:d6:3d:49:6c:a7:74:fb:d0:ba:ff:1e:
ae:c4:38:e7:3f:52:9a:f0:4e:a9:57:a0:c8:05:14:
22:eb:b1:1a:22:ed:df:dc:c9:17:3d:39:db:a0:16:
89:1c:59:da:58:e3:dc:a4:fc:77:1f:a0:4c:5c:2b:
e4:97:38:5c:18:fa:af:72:2d:44:f1:8f:fa:eb:f1:
ea:ae:1e:d6:8a:87:c9:2d:3c:87:de:47:82:86:ec:
40:37:7e:76:82:58:08:92:5e:ab:78:fc:8e:10:eb:
b7:2a:41:64:87:65:db:a7:a2:6a:2d:9a:f0:61:11:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:4D:D9:46:87:7A:EC:EC:57:F3:5B:C2:03:E2:24:6D:12:54:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d9262d3-2f36-3894-8f6b-c0f9b1122a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c9:69:33:81:bd:dd:cb:13:fb:6a:86:69:37:de:ba:8b:cd:
d0:81:33:b0:14:fd:5d:82:d8:2e:b2:27:44:17:c1:0e:70:b8:
91:e2:9c:20:d6:6a:44:00:b9:ec:3b:09:cf:8c:a2:a3:63:5c:
05:e9:bb:44:4c:e4:ee:96:4c:40:17:d8:63:40:fe:df:c5:bf:
3d:03:25:b2:9d:39:73:d3:e4:11:85:b2:fb:0f:69:1d:5a:03:
d7:ae:b0:13:4d:c7:4a:c8:2e:01:76:fd:03:10:ef:cd:c1:18:
fb:9f:aa:af:95:60:91:fc:22:76:76:e1:c9:01:60:6f:a0:d7:
88:8f:a4:6f:79:40:11:45:2f:33:40:bd:87:37:4d:e6:1e:e2:
38:a1:6e:9c:fd:e2:05:b1:3d:df:d5:49:42:6b:bc:c3:4e:51:
0e:70:33:83:a6:b0:80:77:fb:d7:8c:f2:fc:1a:02:a7:b0:1b:
80:b0:4c:f9:59:e0:c1:bb:57:d1:ee:6a:52:f5:3f:63:2a:83:
98:f4:3b:c1:10:08:03:cb:c0:84:11:0a:39:5f:31:3a:b2:f6:
c4:be:0c:b7:22:4c:48:68:c4:97:10:87:da:59:10:a2:59:24:
92:0d:39:d1:ab:fe:54:dc:68:0b:b3:1c:97:ed:ad:c6:ff:5a:
d9:00:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:57 2025 by rpki-client