Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a29ef01b-fa02-3493-ab73-a0a8b2aa30a8.roa
File: a29ef01b-fa02-3493-ab73-a0a8b2aa30a8.roa (raw, json)
Hash identifier: kMZDckPiwBLRpmiaVIQbKbSoj5z5sJdr/Cbirgt0RGg=
Subject key identifier: CE:9E:7D:CE:A6:06:17:17:E8:CC:FD:16:26:8B:55:FB:11:FC:24:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B931229AB98DA9D67F82FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a29ef01b-fa02-3493-ab73-a0a8b2aa30a8.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:93:12:29:ab:98:da:9d:67:f8:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=aa9f89c3-1293-4753-af6e-373b8c77dd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:69:59:a6:40:e1:f6:50:24:ac:f3:3f:51:
d1:3f:5c:ef:b4:12:8f:c9:25:60:e5:cc:e7:1f:10:
5f:83:bd:95:ac:60:5e:c0:59:50:3a:47:73:17:5e:
1c:c5:f5:92:26:2c:21:e6:b9:b4:a1:9d:0f:ec:b0:
75:e1:f3:95:1c:66:0b:66:50:c7:93:9d:0f:e8:8f:
af:88:55:39:b0:52:20:83:b2:61:9c:2b:be:40:b2:
6d:04:5d:ee:63:62:07:5f:21:63:65:07:af:e1:b8:
23:ff:07:7e:37:f0:3b:1f:19:7b:aa:31:26:ef:3d:
91:99:98:19:32:71:0e:4e:7a:d9:e8:45:68:4b:bf:
87:1c:95:a9:3c:63:56:1c:1d:11:66:40:a9:95:83:
5d:10:1b:15:d0:36:b0:82:36:88:82:b4:b1:3c:0f:
e3:a0:bd:5a:ff:ca:d0:c2:68:48:9c:52:66:58:dc:
69:20:2a:b8:f5:8b:8e:25:90:78:ed:7d:b2:43:c3:
84:32:20:7c:c8:f0:e3:06:17:94:58:d3:b4:19:f9:
dd:36:1b:a5:63:9a:7b:17:7c:cb:16:cb:b9:00:c9:
ee:a8:71:10:c8:05:16:0b:a0:73:4d:b8:76:00:9a:
3c:dc:29:cf:a3:43:e7:e7:b6:af:da:ac:0f:dd:45:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:7D:CE:A6:06:17:17:E8:CC:FD:16:26:8B:55:FB:11:FC:24:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a29ef01b-fa02-3493-ab73-a0a8b2aa30a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:94:fc:9e:68:cd:81:7f:c6:51:0d:f9:c9:45:be:62:43:96:
72:e9:d9:35:9c:4e:91:73:7d:d2:e7:03:3e:16:e6:c4:d8:d3:
f5:c6:a3:07:eb:cd:94:c1:d9:a9:f5:f0:9a:8f:10:98:55:bf:
fc:40:86:90:d1:8c:ec:d7:f2:38:dd:59:39:69:35:73:cc:75:
a7:b3:e7:35:1d:cd:5a:24:a8:f6:02:d8:de:ee:36:10:0b:53:
97:a6:25:4f:3b:a6:c7:e3:39:02:cb:b8:ef:e7:1f:41:06:a9:
b1:a9:cb:60:af:22:d3:0f:41:c7:bc:7a:bc:a1:b5:1e:56:99:
cd:a3:cc:98:cb:04:56:b5:9e:f8:90:bc:4b:0d:df:83:c4:cf:
08:87:24:a4:89:8a:47:ab:b2:a0:d8:85:f0:de:d6:01:a7:b4:
a7:ca:68:53:f8:a6:0a:b3:19:f7:bf:97:65:11:e3:b2:21:d7:
87:95:86:7c:cc:61:bb:80:fe:4b:d7:d6:6d:6d:3c:b6:c9:00:
1c:67:47:42:d9:67:62:be:43:c3:da:c6:f7:32:71:98:6b:2e:
d6:b1:29:57:c9:8c:92:f4:48:27:77:dd:8f:55:b9:d4:56:70:
f1:b4:9e:19:6d:68:64:c3:b3:70:9d:0e:e3:85:fd:2d:5e:fa:
a4:4d:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:43 2025 by rpki-client