Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad9a0716-98d9-3caf-8bff-41433b015bd0.roa
File: ad9a0716-98d9-3caf-8bff-41433b015bd0.roa (raw, json)
Hash identifier: UupDHV8FqbU8UjwySgBkc8m1X3UJECBlE3OqCxmOcPI=
Subject key identifier: 67:68:A9:F8:EB:49:7C:DB:D6:EE:F9:9C:7C:77:49:3E:9D:24:DE:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCEBB5D94BAB4955B3DE7D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad9a0716-98d9-3caf-8bff-41433b015bd0.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:bb:5d:94:ba:b4:95:5b:3d:e7:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=9286f5de-a989-4087-966b-e65576177661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:1b:96:a7:f5:30:25:ae:0e:c4:81:b8:8f:
59:37:d8:71:e8:4f:df:95:38:9e:9a:48:2a:fd:1e:
7e:45:c6:86:a0:76:47:3d:85:f5:d1:d8:70:90:e0:
eb:0e:f1:65:21:88:53:7a:8f:fd:ff:04:06:49:96:
a5:be:e2:51:d7:69:d7:d8:38:be:ba:b1:57:83:27:
51:95:f4:b1:0c:29:33:78:2c:ff:f7:7a:a2:ca:33:
dd:52:e2:18:57:7b:bf:8f:9d:91:27:4b:25:87:da:
d1:48:09:7f:55:c9:f7:6f:17:6f:21:f6:5c:62:34:
7d:52:8c:1c:0c:85:45:a2:24:96:63:70:75:34:46:
f3:b4:7e:46:0b:4a:1d:69:6b:90:70:f3:82:1f:4b:
7b:95:b3:fb:a4:1d:27:18:a4:ae:6b:13:52:8b:15:
a7:a2:e5:8e:16:fb:55:44:d2:29:db:b5:6f:cd:e0:
be:4c:ae:81:c1:72:09:e1:e7:79:f5:31:81:3c:5e:
fc:57:08:f5:fd:e0:3d:82:e1:2e:1e:40:96:7a:02:
18:39:13:0b:14:6d:53:75:9e:bf:cd:d7:55:15:04:
dc:8c:08:7d:00:21:d8:7a:38:f8:20:8f:f2:d5:8c:
93:85:eb:2f:fd:67:b5:1b:7d:3a:df:1b:83:f8:6f:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:A9:F8:EB:49:7C:DB:D6:EE:F9:9C:7C:77:49:3E:9D:24:DE:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad9a0716-98d9-3caf-8bff-41433b015bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:0b:25:9f:a4:78:2b:89:8e:ec:9c:d6:b6:0c:81:ae:b8:cd:
69:0c:3e:42:76:d9:d3:58:02:cc:b7:f2:00:6d:a0:6a:f1:98:
3e:b1:ba:bf:ea:72:26:13:a9:a1:2b:f7:60:eb:96:52:52:72:
c4:4a:78:86:eb:f3:c3:72:fb:db:67:f0:f3:dc:d7:c6:52:df:
9a:e7:d6:ed:2d:f3:59:08:16:1f:16:d0:ac:2a:fe:c9:2a:c7:
82:e7:f9:91:1b:59:b0:83:43:96:f4:21:26:74:b9:e4:f4:bf:
20:cd:0d:50:2f:09:c7:6f:f7:24:6d:ed:04:72:be:d2:85:f0:
66:7a:02:4c:f7:48:e2:bc:2e:a5:27:e4:e0:9f:32:0d:d9:a1:
10:d7:8f:e6:b3:47:fe:55:43:c0:4f:e1:81:3a:c5:99:b4:2f:
21:be:19:72:1e:ea:5f:31:d7:4a:05:5a:15:d4:b7:fe:8a:1c:
a4:c2:79:0a:5a:8d:63:66:68:87:c1:4b:7a:f6:36:4e:14:c1:
b8:53:8e:dc:94:ef:d5:c6:41:86:76:29:5c:ed:af:5f:b2:44:
36:14:14:d8:df:55:07:68:a9:40:32:79:c8:45:a9:33:37:73:
7b:37:33:4b:30:08:76:cc:9d:ab:9b:cf:44:fa:31:e9:8e:6a:
b5:cd:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:24:57 2025 by rpki-client