Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfdd474-dc66-32dc-8de6-ed130d04f2ec.roa
File: acfdd474-dc66-32dc-8de6-ed130d04f2ec.roa (raw, json)
Hash identifier: Lu2w3T4swNdZVuFfjlAIQXNtnr+W8rqmhzu2bTTTVEQ=
Subject key identifier: 68:17:FD:34:1C:FA:27:14:EE:88:8C:04:E7:7A:F6:9D:8B:35:D3:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DABD5F85FE5EED18035176340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfdd474-dc66-32dc-8de6-ed130d04f2ec.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:d5:f8:5f:e5:ee:d1:80:35:17:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=a692b6a4-0940-4d2e-bcd5-93ca7d7d4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:de:4e:9b:6f:d3:a0:cc:02:97:ac:cc:f4:
86:a6:fb:59:f8:8e:fd:b5:ca:f9:3f:43:38:08:1a:
8e:2b:4d:bf:2b:69:3b:71:f3:e5:a2:5c:49:08:25:
de:4e:91:a4:af:b5:94:8e:f8:da:95:3e:cc:30:27:
a2:7d:87:04:c5:b5:14:dd:c4:76:f8:ea:da:d7:b2:
39:15:89:78:20:e1:fc:c1:bf:2d:b1:a9:91:d8:64:
b9:9a:64:f6:50:6d:32:2b:9a:de:f7:48:30:ec:a6:
1e:b5:de:9c:2b:0d:e2:30:bc:98:bf:15:35:72:51:
e4:1b:a9:6d:46:f8:95:2a:bf:1e:6e:6b:53:5b:62:
98:4a:98:83:9f:e8:e5:0d:fd:de:e4:2b:1e:85:00:
94:75:1a:ac:f8:64:e9:11:4f:50:52:e8:d1:ca:73:
4f:ad:51:83:4a:75:a1:d1:1f:02:8e:01:f4:50:f1:
ea:62:56:3d:27:40:6f:bc:11:da:89:87:31:22:a3:
68:9a:9e:ad:8a:f5:a8:02:da:88:46:71:92:10:1b:
de:e0:42:a6:3e:03:5f:52:1b:91:53:43:20:d9:82:
46:e5:af:63:51:34:b7:2c:c1:e3:49:1f:c4:34:f2:
d7:30:85:0e:f0:8d:20:ce:20:60:77:bc:4d:d9:94:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:FD:34:1C:FA:27:14:EE:88:8C:04:E7:7A:F6:9D:8B:35:D3:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfdd474-dc66-32dc-8de6-ed130d04f2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b4:d5:b9:dd:19:63:87:8e:67:fd:c9:86:10:4b:1e:1b:9b:
60:f7:cf:39:70:99:a0:12:9e:3f:a0:5d:9c:f5:f2:c5:e2:fb:
4b:34:c0:d7:c1:f5:6c:40:58:ab:eb:11:df:cc:9b:91:64:cf:
c6:4a:8b:ba:3b:0e:50:4a:31:46:00:b2:c2:1a:0b:44:0a:3a:
29:85:bc:1b:01:25:7b:a0:df:c6:81:8c:a2:3f:68:44:ad:3f:
b7:85:56:22:ff:1c:29:97:60:5d:93:6f:a9:25:e8:0e:a2:67:
a9:17:1c:0d:ff:74:46:13:91:76:4f:83:e3:81:82:f0:1e:0a:
10:38:37:70:b9:37:d4:86:42:4c:be:54:c4:4d:47:16:20:b2:
eb:14:23:a5:aa:d4:c2:96:5e:cf:5c:77:cf:39:80:23:66:1d:
e0:db:e0:c1:fe:53:43:fc:e9:b8:68:55:1f:0a:49:f5:04:e8:
d7:53:b1:1a:fc:7e:a4:08:8b:53:b0:27:fa:d1:91:22:e5:62:
c0:6e:a7:8a:30:95:ae:98:8f:10:15:8a:7d:5e:01:07:66:df:
00:fc:1a:23:18:b6:f6:93:8d:ae:06:91:84:db:50:68:bb:61:
c9:32:4e:01:ba:14:13:f1:bc:e1:3d:59:99:88:3e:dd:63:92:
7b:61:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:23 2025 by rpki-client