Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00c5c76-17da-313f-93f1-cb49eb214e9a.roa
File: a00c5c76-17da-313f-93f1-cb49eb214e9a.roa (raw, json)
Hash identifier: gor5la6mcVPKhdKa33JD12O/Ii8PKaU6J6YKaOy7iJE=
Subject key identifier: 5F:8B:FF:DB:93:39:D7:DD:8C:A2:5B:92:4B:B0:FB:D1:55:8F:27:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D324FBF190EFB32A9E685B400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00c5c76-17da-313f-93f1-cb49eb214e9a.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.88.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:4f:bf:19:0e:fb:32:a9:e6:85:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=042dc5c7-ff13-4168-a6a5-e5ddf9239bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:60:d2:99:e6:28:00:c8:37:dd:7f:70:7c:
ea:aa:83:59:a5:01:9b:9c:e5:69:a8:8b:cb:d3:67:
81:d8:4a:a6:cd:bf:5e:45:be:89:8a:2a:0f:e4:38:
d8:75:11:27:51:a9:63:1d:8e:92:53:0e:75:05:7f:
f7:b8:c8:40:63:87:14:ed:66:d4:0d:3d:b9:87:46:
3e:92:64:57:ad:f0:b2:c3:ff:34:58:5a:53:f0:ca:
36:6d:60:0f:fb:30:ed:d9:e8:e0:71:a1:32:b1:49:
9a:bf:0a:da:25:ed:30:2e:56:47:96:67:d8:f5:65:
6d:e0:44:94:fb:52:ad:4f:40:fe:1f:c7:92:b6:c1:
cd:cd:92:9c:70:e0:5b:96:7a:d2:fa:20:bb:d1:7e:
ae:02:01:2f:b4:77:62:84:72:31:c5:fd:9a:fe:1c:
2d:3a:f2:7c:43:18:34:41:06:50:f6:21:fe:cf:51:
fe:bf:40:e8:eb:ac:8a:ca:5f:d1:3e:3e:f4:2e:cf:
96:f1:44:c5:de:c6:f7:bf:b2:ad:ec:cf:bd:6a:a3:
f2:61:9c:de:d4:29:45:9e:00:a8:81:05:60:46:4f:
ae:29:05:b7:55:ad:69:aa:83:00:74:c9:09:15:63:
67:61:d3:f9:b3:53:52:ef:ae:e2:a8:5b:fd:91:a8:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:FF:DB:93:39:D7:DD:8C:A2:5B:92:4B:B0:FB:D1:55:8F:27:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a00c5c76-17da-313f-93f1-cb49eb214e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:33:40:cf:88:ec:73:5d:f2:b0:6b:59:b4:1a:08:3e:2a:c0:
94:43:73:54:31:c2:48:ff:c0:c4:d5:be:fb:42:a7:78:c0:fc:
c3:03:ea:85:ea:af:b1:65:00:cd:6a:4b:7d:95:98:dd:4a:ef:
63:0b:47:54:b8:5a:8e:8a:d6:17:d9:63:c7:04:1a:2b:08:28:
ec:b3:67:06:ad:ac:62:49:11:39:90:a4:3f:3f:00:16:25:88:
a7:c9:c4:97:95:dd:47:87:3d:e2:1c:c4:0d:b3:d4:4d:d5:50:
cf:ae:8c:12:90:c7:79:c6:6e:4f:bb:61:a8:86:ba:3f:3a:bc:
e2:eb:cc:f9:fc:3b:6b:59:3a:f2:9e:c9:3a:12:15:ae:96:fb:
42:82:1d:c1:19:7b:c0:39:4c:26:d0:f1:35:e0:65:04:97:8f:
68:b0:24:04:b1:a5:a8:a5:64:7c:75:0f:bf:d1:73:3b:0b:61:
ae:ab:38:29:b6:a0:de:b0:bf:41:ba:58:fb:5d:bc:04:36:65:
ce:d4:43:47:c3:2d:e0:f6:12:15:a0:5e:89:3e:d2:1c:d3:e9:
d5:31:dd:d2:ed:a6:6d:97:bb:29:19:e3:1f:52:f4:c2:a3:29:
c3:13:d9:05:62:51:01:8a:76:b3:b0:b6:2e:e6:d3:fe:77:fe:
31:2b:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:57 2025 by rpki-client