Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00527ea-8cea-3f32-8e8b-babac020b306.roa
File: a00527ea-8cea-3f32-8e8b-babac020b306.roa (raw, json)
Hash identifier: NVXPw+absi4BZCuazbymnpJm/hld13CoYWJBLd/W29M=
Subject key identifier: 3B:C8:68:CA:84:5A:F0:39:A9:8A:AA:72:85:D6:14:2C:34:A4:64:61
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6FA2B68A0D57080BF11A9A98
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00527ea-8cea-3f32-8e8b-babac020b306.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:a2:b6:8a:0d:57:08:0b:f1:1a:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=746bda5b-a4b3-4e3f-92df-c60d4277b431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:49:91:6b:8a:f2:48:eb:6f:3d:d4:60:cd:
76:fb:4f:ec:30:5b:81:6a:23:f8:b7:f0:c0:7d:08:
8f:95:87:f0:a0:ba:48:de:7d:e0:65:4c:e4:6d:53:
38:b5:26:26:1e:36:fb:a9:43:34:d6:07:b0:6d:3c:
f8:e5:f1:c3:e0:e2:da:50:c3:36:34:d0:dd:3c:c0:
a9:e3:ce:3a:b4:9a:b4:5c:6a:86:9f:bf:88:04:fb:
77:9b:de:f8:d2:84:9a:50:be:8b:80:a2:b1:7e:8a:
a4:2d:39:0a:1b:ce:b9:a8:b6:8a:3c:41:78:59:f7:
89:a8:d7:46:19:74:b3:5d:65:5c:c9:54:7e:3e:f8:
b8:9f:ba:d0:ee:b8:01:a2:7a:b4:e5:be:8b:21:08:
d3:69:6b:bc:99:c2:72:ce:85:42:8c:72:fd:16:e4:
1c:5c:ab:4d:80:9c:b3:c2:3c:22:8e:f8:87:db:32:
f7:53:9f:5e:c5:26:c2:51:eb:3e:d3:de:ad:ae:d3:
55:5b:3d:d9:c6:83:5f:11:7b:ba:77:3d:74:83:f5:
53:f5:3b:da:b7:5c:79:37:63:f1:13:11:3e:b3:66:
e3:1a:1b:0b:63:64:d7:03:61:f0:84:31:c0:94:a3:
4d:51:ef:f2:0f:50:0f:30:64:34:4c:96:c6:af:dc:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:68:CA:84:5A:F0:39:A9:8A:AA:72:85:D6:14:2C:34:A4:64:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00527ea-8cea-3f32-8e8b-babac020b306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.196.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:bb:a8:42:ae:12:44:13:5c:52:ab:00:89:2d:bb:a5:aa:15:
9b:97:c5:f3:ef:34:4f:53:b8:fa:ab:3f:f4:95:95:bb:70:b1:
82:9f:61:04:b8:41:18:a3:f5:0c:96:68:03:14:0b:64:c5:f0:
5a:26:a2:a1:f8:ae:6a:2f:1f:45:19:ee:ff:b8:0c:09:6c:81:
27:2d:b5:40:01:48:22:e0:c2:f7:27:a2:0c:d5:61:1d:25:a3:
48:28:75:2e:b6:ef:62:df:09:cd:4e:c3:25:f3:7f:01:8d:44:
d6:18:97:79:7a:e1:0f:e1:09:d6:2a:67:58:75:f0:7a:95:f5:
e7:a3:f6:29:57:13:5e:87:a5:34:a6:5b:24:2b:34:f9:a9:b2:
70:0b:84:7b:e0:be:3b:18:81:d7:a1:69:52:e6:7b:63:c9:0a:
d1:7b:d6:9a:90:d6:66:a5:03:59:bf:cb:da:18:13:52:59:b7:
fc:14:7f:de:7c:81:9b:ec:d8:79:67:5e:05:11:49:62:c4:3d:
5b:84:b7:01:8e:62:98:1b:52:e4:a6:fb:28:22:82:ea:9d:64:
6d:88:8c:83:a6:d3:37:d7:50:ef:39:6f:7a:0b:6b:0b:98:15:
da:29:d5:bf:23:51:3e:8a:6b:d4:e0:8c:b7:1f:1e:71:0b:25:
14:0d:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:46 2025 by rpki-client