Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b226cd25-d960-3f02-baf9-feb702333f2b.roa
File: b226cd25-d960-3f02-baf9-feb702333f2b.roa (raw, json)
Hash identifier: pmvW/jluNxES/Oo2SR0WkivMeaqUn7kqFH9BBkcsU2Q=
Subject key identifier: C0:0F:7C:1C:7D:F3:DC:A1:B8:14:85:25:7E:CD:F0:1D:AA:5D:20:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32F84201ECE95B64A4C1E780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b226cd25-d960-3f02-baf9-feb702333f2b.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:f8:42:01:ec:e9:5b:64:a4:c1:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=971c0231-b219-48ab-924c-290105f11fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:4e:21:66:57:15:bb:16:61:cd:72:a4:da:
aa:55:06:e7:24:1f:eb:d8:0c:59:ff:c9:d5:16:d9:
25:0b:6c:2c:47:39:05:c5:a2:e7:fd:88:10:4d:0c:
1b:c9:33:d6:f1:d4:fa:02:4d:7b:4e:d4:33:8b:98:
69:78:54:31:4c:21:67:3d:a5:34:16:8d:35:d8:69:
25:ee:b5:f8:62:9d:08:a8:54:cb:5d:c7:14:08:db:
94:74:bb:e8:1b:1b:c8:bf:84:c8:3d:47:f1:dd:2a:
09:4a:d5:24:c9:29:a9:28:91:c2:57:f2:30:af:ec:
58:00:30:c6:81:74:0b:55:01:10:2c:d1:50:ec:90:
8a:54:b6:aa:8c:9f:04:80:df:c6:43:ee:01:7f:b3:
7b:87:e9:2f:16:66:71:3d:0d:43:aa:77:47:7d:67:
66:39:43:3e:fe:9f:71:50:be:ea:70:7e:26:4a:9c:
2f:1a:52:81:58:86:34:c6:9d:54:29:95:23:d9:2c:
7f:d4:72:6e:3a:89:2f:64:64:a0:b6:14:d5:be:b8:
f8:63:7b:68:23:cc:63:ab:91:67:bf:00:15:2c:83:
4d:08:84:3c:50:f2:1e:00:93:8c:3c:6d:bc:90:2c:
a0:21:9e:a7:3a:40:fe:30:19:51:ec:2e:94:df:b4:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:7C:1C:7D:F3:DC:A1:B8:14:85:25:7E:CD:F0:1D:AA:5D:20:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b226cd25-d960-3f02-baf9-feb702333f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:4e:22:fd:5e:8f:5f:f4:dc:13:39:11:2e:0f:ce:1f:81:26:
ae:3a:34:bf:14:ef:bb:18:79:89:04:85:a3:71:19:e0:73:61:
11:33:4d:9e:07:ff:44:84:11:77:2a:45:78:66:96:78:af:0a:
66:73:3c:9c:ba:e6:74:81:cd:73:12:d0:34:8c:a9:51:d7:e0:
bf:10:67:58:e7:3a:68:fd:dc:4a:f7:59:83:63:cb:e5:9b:7f:
3c:a4:84:b1:d0:8f:1c:4f:71:5c:66:ad:35:4a:c4:e5:20:c9:
af:74:e6:bd:73:c0:f0:ce:16:58:c6:28:9c:36:22:a1:b0:c3:
9d:cd:e3:e1:c6:5f:c4:4e:bf:38:38:fe:ed:af:72:77:7f:f2:
65:91:49:69:b4:df:7e:62:ba:9b:fa:0b:23:06:eb:aa:eb:8c:
e3:38:16:ab:2a:37:f3:53:86:ba:3e:7d:7c:57:40:23:b7:6d:
3e:5c:cf:14:70:be:c1:15:98:b9:36:b6:ed:95:07:12:bf:fb:
62:7e:7a:f6:aa:7f:4e:56:30:47:ab:d2:ab:51:44:fc:af:e8:
bf:09:0d:60:21:d9:22:b6:f5:04:04:b7:03:e2:9b:92:d0:ef:
f9:0a:61:ac:fd:4e:b5:cc:9c:60:2d:6f:3d:87:80:f3:87:49:
df:d2:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:35 2025 by rpki-client