Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa92a57e-744f-300f-bdcf-1c06f4a2e311.roa
File: aa92a57e-744f-300f-bdcf-1c06f4a2e311.roa (raw, json)
Hash identifier: xL6Tih3h07vnU47KZHhVAr7PVrBCMsEyhbEM1JGYtpo=
Subject key identifier: 01:EE:18:18:CF:0B:9F:56:81:CB:FB:48:92:0F:93:5A:41:D6:9C:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F817511901E8D6A2543FDDD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa92a57e-744f-300f-bdcf-1c06f4a2e311.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:81:75:11:90:1e:8d:6a:25:43:fd:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=91df4c30-850a-4033-9dab-8fd4ea0ce375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:83:41:79:a6:71:2f:7d:30:75:10:5f:e8:
20:a7:56:c8:c7:71:87:14:6b:76:b1:eb:d2:b4:07:
78:4f:5a:f3:ab:bf:29:9e:22:f5:ca:c7:b1:c1:3e:
b9:4f:a1:f2:3f:52:c6:50:d0:10:32:ac:70:9e:86:
9d:ce:25:fd:24:c9:ff:db:03:57:c1:41:72:c4:90:
e2:e1:8f:61:65:7e:49:0f:e4:1e:e1:40:31:ca:a4:
d2:c5:35:39:c1:73:3f:9c:e1:99:f7:6d:ea:e6:f3:
05:4a:01:ba:cc:a0:91:36:db:ec:2c:b9:4e:0b:47:
d9:42:92:4f:d0:67:19:c8:e3:2b:6a:a6:e2:e6:e7:
67:48:70:f8:ec:e6:b3:8f:a7:b7:0b:04:9e:0d:c2:
8a:92:25:d4:ec:76:d1:e4:0f:04:31:03:cf:6e:c2:
3b:d7:6e:fe:3f:a9:9b:39:58:66:c5:0a:48:03:1d:
e8:b5:70:db:30:a2:3d:1c:a9:bc:76:ea:79:f6:6b:
94:b1:cf:bc:a8:18:59:b6:d4:c7:58:fa:0b:49:d6:
91:95:8a:53:ee:67:30:99:35:a0:be:24:1e:63:c6:
ef:13:45:f7:07:99:e4:da:16:53:4e:8c:26:90:83:
eb:33:3f:4d:34:50:f2:98:0b:76:b2:26:55:c4:8a:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EE:18:18:CF:0B:9F:56:81:CB:FB:48:92:0F:93:5A:41:D6:9C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa92a57e-744f-300f-bdcf-1c06f4a2e311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:15:14:d0:a0:71:13:d6:5a:3c:d1:ef:68:29:45:c7:8a:4c:
32:b7:38:09:ca:2a:12:9e:ac:14:c0:58:ef:4c:87:2b:a6:d2:
c1:15:5f:2a:9f:53:2c:fc:0e:a6:70:4d:e6:f6:47:46:62:d3:
d0:34:a8:b9:29:00:a3:15:24:7f:a7:25:f2:a1:ef:17:e4:84:
e5:fa:8f:d2:0c:67:fe:69:c4:84:1a:39:7f:04:f2:05:93:4f:
86:87:70:5d:de:53:80:d8:12:26:80:d2:ba:8c:6b:c3:3f:b6:
71:f3:b2:62:f1:53:51:a7:0f:7e:4a:9e:8a:ec:01:6f:f3:f4:
17:96:01:73:eb:2d:74:2a:7b:6b:52:3d:d1:2d:5e:e4:7f:39:
e0:29:32:8d:d3:c0:78:33:6b:24:a4:4d:97:45:b5:d4:49:e8:
6f:4d:bf:9a:cd:58:af:55:34:bf:64:95:14:bd:06:05:2d:bd:
73:03:41:3d:60:8f:09:3b:7f:9c:c0:0e:c3:d5:d9:5f:70:2a:
8b:b6:f7:f2:b5:c1:81:e2:3a:50:5c:bd:a9:a0:d2:6e:c2:51:
b1:68:20:11:07:06:cc:8b:ee:19:fa:4a:1b:ca:11:05:04:a0:
48:25:72:66:cf:07:db:05:c5:a9:4f:f4:0a:e9:b1:b0:9b:54:
39:74:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:34:29 2025 by rpki-client