Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa020fed-673a-3e5b-ac7b-f702eef1104e.roa
File: aa020fed-673a-3e5b-ac7b-f702eef1104e.roa (raw, json)
Hash identifier: n3r/Sxmh9R8vxZZrYJM/Txi5C/V2dgMUnaC4xv+Tu94=
Subject key identifier: A8:9A:3C:CD:6D:D3:A6:7A:E6:DF:61:02:DB:A7:FA:49:E1:A5:D2:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E21525FFF09F26F45273173C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa020fed-673a-3e5b-ac7b-f702eef1104e.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:52:5f:ff:09:f2:6f:45:27:31:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=0e26003e-4355-4699-8102-7a1be2e73fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:fe:bd:68:0e:1b:e8:ad:eb:f4:9b:ff:b6:
29:45:80:6d:43:08:61:09:32:b0:5c:67:fe:f6:6f:
69:dd:43:5a:e4:6f:03:d7:db:02:e8:4b:e8:6b:35:
be:56:3c:3c:1d:4a:16:ee:8e:64:12:0e:e9:23:6a:
a6:b6:85:fd:f3:fd:3d:28:3c:8e:42:3f:8e:4b:83:
f0:16:fe:ff:36:e1:a4:3e:67:d2:ac:9b:e5:84:6a:
2b:18:92:68:09:e4:b2:07:4a:6b:0a:ae:90:5e:e2:
0e:7f:49:7a:31:e4:4a:81:de:fb:5d:8c:5d:77:2f:
5b:49:39:16:38:0a:0e:5c:fc:59:b3:4c:bb:e1:f6:
8b:75:66:4e:48:8b:38:32:4e:27:db:af:1e:de:6b:
19:0c:5f:34:30:ef:5a:87:8d:ed:56:a4:74:3a:21:
b4:65:78:dd:e2:a8:2f:b6:0a:67:6a:5a:a9:a4:3b:
c4:7e:07:ea:0a:42:8e:a0:ca:83:73:39:37:68:4e:
67:7d:e2:87:52:2b:28:35:bd:db:4b:8d:db:fb:b3:
d2:7b:43:ec:fd:4a:e5:04:c9:30:ad:cf:b1:e5:bb:
bb:bb:dd:2d:d6:af:85:6c:e5:be:10:c3:59:b3:c8:
06:a3:86:a4:94:e3:14:ff:eb:5a:6e:db:8c:d6:d1:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:3C:CD:6D:D3:A6:7A:E6:DF:61:02:DB:A7:FA:49:E1:A5:D2:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa020fed-673a-3e5b-ac7b-f702eef1104e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2c:c5:49:d3:f0:b8:71:e6:86:b9:cf:f3:78:75:9f:ae:64:
36:70:ad:b8:18:3d:30:19:ba:e0:cf:14:19:0c:f2:c8:84:e1:
78:42:30:79:f4:79:ff:7d:3a:d8:45:e8:82:e6:1c:56:8d:47:
39:19:a1:a6:a5:f9:5c:5e:07:7d:ce:df:45:16:a6:15:1c:e9:
f5:76:63:b7:14:0e:a5:21:64:86:7f:52:e4:2b:90:01:67:fe:
39:a4:13:e9:0d:45:b3:94:74:c3:b9:d0:d6:f7:c0:54:51:9b:
af:90:98:5d:13:3a:a1:7c:a3:ce:66:9f:ec:b0:0f:d2:38:8c:
d8:3c:0a:0d:45:a1:1a:40:43:ac:5b:bd:3d:18:17:8c:bb:f3:
f2:b5:15:72:9e:e1:e0:fa:73:47:5d:50:8b:b3:7f:9b:44:22:
a7:1f:54:a5:7b:d6:c0:4f:51:bc:4d:1d:6e:fb:7f:1f:ad:e6:
8c:35:be:e5:f3:d4:00:11:f2:1b:64:f6:2f:8b:19:36:c7:ea:
63:0e:d9:e7:be:d4:bf:3f:d0:72:7d:0c:1a:0f:69:0e:cd:4b:
ab:f5:9c:97:0f:50:9c:b8:8b:fd:3a:8c:f2:f2:84:55:97:c1:
16:d2:23:6a:5e:03:bc:5e:b7:76:b2:e6:fe:d2:a7:92:4b:77:
06:ab:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:59 2025 by rpki-client