Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a98d9ff9-4d84-3728-a858-61ec359b8b54.roa
File: a98d9ff9-4d84-3728-a858-61ec359b8b54.roa (raw, json)
Hash identifier: xR1yAzczFLVi4qJJH08897KcOgbwuBjKvKaPfZ5R7IY=
Subject key identifier: 21:24:6E:7F:23:0D:3C:91:52:2A:E3:B2:BB:B8:ED:1F:2F:CA:A6:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80893B8B599776BC1F9A4EB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a98d9ff9-4d84-3728-a858-61ec359b8b54.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:89:3b:8b:59:97:76:bc:1f:9a:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a858fe1e-86db-407d-96f5-ba1a5f1f2a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:a5:15:7b:15:a1:f4:25:c8:af:82:d8:8a:
67:b2:c6:bf:eb:6e:1f:47:a2:ed:ca:bb:43:31:73:
64:be:d0:47:d3:2d:a2:95:5b:75:a1:ac:1c:14:0a:
3c:09:54:d9:03:1e:24:db:d6:ab:f1:f5:b8:4c:af:
cc:42:c9:24:b3:84:24:b6:99:7f:00:cf:f2:9c:f1:
28:a5:f9:16:55:38:da:17:e3:ce:e1:e3:30:0f:bc:
da:e8:ef:e8:0b:82:16:aa:73:b4:9d:2e:17:3d:c7:
71:5b:72:8f:39:71:3c:c3:3e:90:42:e2:53:7c:31:
ce:67:8b:97:dd:6a:a1:0b:14:17:41:3a:14:c6:f8:
86:a5:41:ab:11:a3:bf:0a:df:3f:4b:a5:f3:34:6d:
16:2f:3d:9f:e8:88:8c:af:f3:23:b7:51:5c:d8:59:
34:b1:86:8f:71:14:6e:91:c8:2e:9a:e0:9e:d3:71:
17:24:8f:e6:5c:74:c8:df:dc:b1:de:b1:c5:f0:69:
46:d2:31:e1:4e:8e:da:09:6a:d8:bd:f8:d7:fd:de:
86:08:b0:b5:b0:9f:d2:10:c1:4e:a5:35:4a:76:2f:
d7:ab:c6:ca:d3:bb:31:6b:ad:ed:be:49:2c:74:ac:
56:93:7b:d8:1d:d2:c0:e3:a4:91:d7:cb:73:6b:61:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:6E:7F:23:0D:3C:91:52:2A:E3:B2:BB:B8:ED:1F:2F:CA:A6:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a98d9ff9-4d84-3728-a858-61ec359b8b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9c:23:da:6b:f1:d3:91:99:1f:77:f5:c2:8f:6c:3b:7f:d7:
6d:5d:27:63:6c:99:db:8f:5d:19:43:6f:9b:0b:81:2b:e8:a2:
34:83:4c:89:0a:05:2b:9e:b8:43:de:79:86:db:9c:ab:19:50:
ac:70:ba:48:48:1e:99:84:69:cf:d7:26:83:2e:b0:7f:7b:b5:
f8:9b:1c:ef:93:16:3e:d8:62:3a:c8:a7:10:ae:eb:90:60:45:
ab:7d:56:dc:b9:db:ff:14:48:6c:92:b7:e5:64:21:79:4d:d0:
97:98:38:8d:39:b5:39:b3:75:40:e9:5f:df:48:e1:93:7b:d0:
84:ac:8e:88:c3:52:ef:f7:d3:04:01:e5:54:93:90:ed:6d:83:
c1:18:46:1d:4f:61:05:85:36:28:72:8d:13:05:51:77:cb:28:
00:10:cb:93:a9:1a:2c:0c:c7:88:27:3d:09:c2:fd:df:d3:fa:
0e:65:4b:44:8e:02:0f:3d:03:c4:60:65:f7:4c:ee:ed:8e:fd:
28:59:c6:ea:d0:f3:c2:1d:3c:08:fd:5c:6d:6d:f0:53:5f:64:
08:c5:c5:4f:c5:37:dd:59:23:76:34:67:1c:f1:c3:df:8f:f4:
2f:bf:84:be:92:44:83:82:e6:50:dd:65:9f:db:ff:96:c9:24:
88:0d:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:21 2025 by rpki-client