Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaf82882-d91d-304b-bf95-6b310437c49b.roa
File: aaf82882-d91d-304b-bf95-6b310437c49b.roa (raw, json)
Hash identifier: wBYVypCCFtKYL+aiiXLUq5FA5oy72HZg5/+L8HnK8FQ=
Subject key identifier: E5:71:89:B4:A8:4F:49:40:5C:51:1A:B5:30:CC:2C:0C:6D:90:7E:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBED9D7247AA07D74B03989C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaf82882-d91d-304b-bf95-6b310437c49b.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:d9:d7:24:7a:a0:7d:74:b0:39:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=6bb3f4ad-87ce-4c34-9302-d600e8df3a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:6f:af:f1:4f:35:87:36:14:a5:86:68:b8:
d8:38:91:95:de:58:59:61:f6:fa:40:f6:54:7a:cc:
ec:51:57:0a:09:85:cf:5d:fa:97:88:a9:68:38:c3:
c2:4b:e4:08:ba:65:cc:7a:d0:29:15:14:5c:1d:66:
f2:3e:a2:f7:9c:91:73:b6:d4:04:c3:7c:43:b9:4a:
d4:be:f3:25:d4:3e:b8:52:d4:d1:d2:2c:15:88:1d:
75:0f:23:1d:52:28:0b:cb:6f:9b:c8:50:b7:b5:d5:
89:42:07:ae:37:16:b0:7f:8e:af:4d:60:dd:4c:37:
cd:fc:0c:3d:cd:f8:a0:6f:d0:ff:5e:69:72:29:32:
62:f2:f1:06:c9:ba:25:d9:e3:76:34:5b:7b:36:7a:
71:4e:e6:e4:53:6f:bd:68:60:4b:c1:40:3e:3b:78:
36:73:d8:97:db:b7:59:67:34:48:db:7e:61:2f:ce:
3a:bb:7e:3d:1d:ea:97:60:1b:39:4c:a8:0d:6e:7a:
77:e6:ed:4e:9c:74:34:d6:da:9e:49:0b:d1:7a:50:
cf:1c:ad:cf:c1:42:8d:8e:4d:67:78:40:33:11:18:
29:07:83:f8:58:3c:99:63:e9:b7:b9:63:8f:18:f9:
85:20:bd:35:81:6e:f1:70:8e:88:66:c1:69:3e:2f:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:89:B4:A8:4F:49:40:5C:51:1A:B5:30:CC:2C:0C:6D:90:7E:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaf82882-d91d-304b-bf95-6b310437c49b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:62:f0:24:51:ff:64:f8:f6:92:9c:c6:af:ae:95:1c:97:4d:
d3:1d:5b:bd:74:5e:91:c9:b3:56:93:56:32:ce:fa:be:e6:f8:
cb:4f:07:ce:58:92:6e:18:ed:4e:c1:30:26:5b:ba:7d:a3:c5:
8f:b8:3c:05:b3:15:ca:01:75:72:c5:25:9b:df:50:12:5e:03:
67:fa:c7:9a:36:f6:a1:ec:b8:09:bc:dc:1c:8c:bc:f3:0c:ee:
30:26:b4:1c:44:d0:26:77:fb:16:38:08:6f:c2:13:99:58:bc:
40:db:cb:8f:80:d0:16:63:09:a0:95:62:3a:5b:3b:87:23:4f:
ee:d8:02:50:2d:a5:d1:d1:97:0c:68:e0:b4:ac:10:d9:a3:07:
35:23:a2:7e:35:fa:80:6b:5a:ca:d7:ef:44:03:e3:e4:2a:77:
03:b8:fa:90:69:40:cf:c4:43:c8:89:29:7a:69:4e:db:7b:5d:
ce:b8:88:9e:d0:25:f4:2f:5e:e4:f6:90:ef:65:ba:1f:96:23:
e3:ec:0f:97:6b:45:da:5b:3a:c7:47:2b:6b:3e:a3:ca:2b:b6:
42:1a:d5:ed:b6:8c:04:92:40:e1:db:74:09:41:8a:29:41:e6:
ba:59:40:99:f8:7a:92:88:2c:cd:f2:07:a1:b5:22:87:af:36:
87:94:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:58 2025 by rpki-client