Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dbf204a-6d7d-3f59-bd32-82729e125ead.roa
File: 9dbf204a-6d7d-3f59-bd32-82729e125ead.roa (raw, json)
Hash identifier: r4YWpjE/akY+6K4lWrEwakCxCbOtFB8jFciqkfDtyNs=
Subject key identifier: B9:3C:4B:55:DF:84:4E:52:30:7E:14:70:EA:02:99:3D:AD:F7:AE:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD49979750024A46D5141D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dbf204a-6d7d-3f59-bd32-82729e125ead.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:49:97:97:50:02:4a:46:d5:14:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=6e328717-9ab7-41b3-89fa-80b2601fa55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:c1:b1:b0:6a:56:7f:e0:96:2f:33:d6:69:
06:4d:ea:6d:b3:d9:54:f2:6a:03:4b:25:f6:17:1a:
83:b4:a0:18:68:58:69:10:68:51:ac:b4:a1:90:86:
0e:ee:51:67:7c:7b:83:8d:d7:ca:55:18:b3:c7:95:
e1:5a:62:ac:2e:58:41:eb:7f:26:a9:a8:08:4d:58:
91:91:55:c4:d8:4c:9f:22:16:53:47:6a:f8:d0:c8:
41:0a:67:ec:ce:3e:4c:63:d9:d5:2c:0d:2f:5c:6d:
90:4d:6a:44:16:79:33:34:c7:7f:26:72:f2:18:7a:
d0:4a:29:fc:4c:6c:76:44:e9:08:c5:70:2d:e1:35:
43:2a:31:81:ed:af:f3:e4:b1:a6:57:7f:f3:8e:00:
10:5e:10:13:bd:30:e2:c4:46:c5:31:9c:0a:a4:40:
fb:47:80:0d:a8:a8:f5:ed:e4:8b:ae:2f:76:a5:96:
db:53:3c:6b:a1:6b:1b:8c:fb:82:3b:77:c8:f9:d0:
f7:6f:73:34:e2:f4:e7:aa:42:a1:49:61:9e:cc:21:
70:32:89:23:c2:bf:c2:44:f3:3c:5a:24:cf:2b:a9:
c3:5e:92:8c:e2:27:8a:d5:e4:f6:4b:66:4b:e3:00:
b0:a8:24:f4:e4:ea:f8:56:1c:cd:a8:82:61:50:3c:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:4B:55:DF:84:4E:52:30:7E:14:70:EA:02:99:3D:AD:F7:AE:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dbf204a-6d7d-3f59-bd32-82729e125ead.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:6a:1e:f7:b1:e7:80:77:2c:2e:c6:a3:e3:c8:62:e1:ac:41:
5b:62:e5:45:1d:bb:e6:41:0f:cd:de:bd:23:60:23:7b:a2:22:
0c:db:ad:65:43:68:e4:ee:88:76:03:62:b0:e6:23:6a:a6:00:
bf:28:ed:d2:55:94:6b:af:94:b9:1f:39:90:f5:2f:72:6b:46:
68:8f:e2:9e:f3:1a:56:c0:3c:a8:16:29:5a:37:c1:3e:07:62:
4c:35:6d:58:d4:4e:cf:ec:7f:44:4d:b3:30:6d:35:f9:6c:95:
95:4e:f2:10:95:44:89:fe:af:4f:31:82:35:48:15:b6:b9:ed:
c7:56:1b:f7:61:e5:2f:df:29:cc:72:90:ef:3f:89:05:40:f3:
a8:66:e6:55:7d:b7:6b:6e:b2:2f:67:db:53:49:f3:66:a8:46:
b5:9b:30:ea:58:ce:9a:55:7a:36:b3:45:da:93:e2:7d:40:98:
b5:8a:c8:1c:7a:13:2d:47:fa:49:6e:1a:b0:bd:cc:63:b5:75:
51:4d:cc:3e:42:86:d4:2c:d9:47:01:8a:77:52:f2:0e:59:a3:
13:34:0c:ba:eb:08:28:1d:ce:ee:59:85:5a:53:b9:4b:40:08:
1f:2a:e7:76:f3:49:b4:40:81:0a:e3:0d:4c:80:eb:83:38:6c:
20:4c:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:12 2025 by rpki-client