Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b84aae48-e76f-3638-8f18-14d4b051dbdd.roa
File: b84aae48-e76f-3638-8f18-14d4b051dbdd.roa (raw, json)
Hash identifier: 35AGWNcawRj10uUEwBM3dVCdBEIux3oC2uYQ59gHKZw=
Subject key identifier: 57:55:C5:9A:F1:D6:0E:52:AE:4E:30:30:34:37:69:03:49:0F:8C:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95F8E53A04215E0ADE1D23D4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b84aae48-e76f-3638-8f18-14d4b051dbdd.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:f8:e5:3a:04:21:5e:0a:de:1d:23:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=7292c2cb-ce64-46d9-a1c6-e85f9e71f8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:06:3e:15:d2:7b:03:a0:84:fa:81:42:4c:
c2:ac:66:6e:cf:1c:af:f3:e8:1b:4c:12:72:68:ba:
8e:ad:ab:6f:7d:3d:bd:56:8e:e8:2d:05:cb:e6:35:
b9:69:6e:04:44:80:cb:12:9b:17:f7:da:19:07:36:
32:5d:18:78:b8:b5:51:28:2c:b8:5b:45:4c:57:18:
61:c3:de:1a:2f:1d:f0:e5:5a:08:2b:29:75:13:a4:
8b:21:bc:f8:44:3b:c5:84:b0:60:aa:79:ee:29:eb:
c3:5c:0d:6e:35:34:b6:f7:58:8e:10:ea:99:27:4c:
1b:fd:01:10:3b:d2:11:07:f1:a6:7d:5b:67:2d:e1:
b6:bf:b7:c0:75:0f:72:1e:bd:41:dc:38:ad:e1:b5:
41:ec:41:0f:90:84:dc:d9:bf:45:75:14:ca:ee:b2:
56:99:60:1a:13:6f:03:31:67:21:1a:a5:24:97:9c:
6e:07:15:2b:ed:56:03:87:92:a6:db:81:db:74:5c:
cf:72:ba:3f:f2:4a:39:04:d1:16:1d:44:42:97:f0:
c6:1f:b8:4b:9e:92:9e:0d:60:27:7b:c7:54:a7:b5:
75:54:1e:65:dc:e8:fe:10:23:04:fc:63:fe:39:8c:
95:4b:75:f2:ab:af:59:82:7f:f8:fd:d5:5b:d4:cd:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:C5:9A:F1:D6:0E:52:AE:4E:30:30:34:37:69:03:49:0F:8C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b84aae48-e76f-3638-8f18-14d4b051dbdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cd:e1:29:ed:1a:f7:c6:90:0a:f9:a5:6b:88:e5:0f:02:4a:
1d:ec:63:65:4a:c0:13:20:30:43:74:0d:70:11:85:15:2b:ce:
82:f4:92:d8:53:f3:44:3a:0e:b6:87:42:4d:17:1e:04:07:b3:
d9:ad:7d:c7:8b:1f:a0:40:70:19:89:9e:89:50:56:0d:e9:31:
f6:fc:e7:8e:80:b1:9c:9c:d4:2d:fb:f7:6e:00:d5:bf:52:0c:
c8:1a:d0:c9:3e:de:a0:f0:43:57:7a:a4:fd:84:c4:a7:fa:6e:
c3:63:2b:43:86:c9:f3:33:b2:37:82:a2:92:cb:03:16:c6:14:
36:0b:7f:ac:d8:84:29:76:9d:d5:1f:22:95:27:47:90:c7:bd:
a2:a8:b4:f4:76:b4:90:97:d8:24:8c:e9:23:fc:15:62:d7:b5:
64:bf:91:4e:34:6b:bb:7c:03:b5:80:84:95:04:75:66:3e:0e:
03:0b:38:f8:cc:95:8f:d1:54:d0:b0:44:47:ea:e0:70:7e:e6:
fb:a8:24:12:f3:11:1c:b7:df:47:1a:2a:10:7a:31:0d:de:47:
e3:43:80:7f:d5:5e:a6:30:e6:30:fa:6b:ee:d5:aa:8a:bc:7b:
a9:1a:3c:4a:af:27:b7:13:7a:a6:6c:0d:9a:96:98:98:35:7b:
8b:25:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:25 2025 by rpki-client