Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b97019ce-19d9-382a-886e-71242a9828e0.roa
File: b97019ce-19d9-382a-886e-71242a9828e0.roa (raw, json)
Hash identifier: GKFsjvTCB+fwDr5ggMp8OC3dVugm8bXhkq2mcrSvfTo=
Subject key identifier: 9B:E5:03:9E:66:85:2D:AA:02:DC:9E:54:4A:37:83:64:43:6D:A1:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4417FD1DABFA265D9E6C340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b97019ce-19d9-382a-886e-71242a9828e0.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.132.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:41:7f:d1:da:bf:a2:65:d9:e6:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=3ed275f3-01c0-4ff2-a966-69a93109f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:8f:23:b6:3c:04:02:36:a2:f8:f1:1f:cc:
35:dc:c6:c4:13:f1:ef:7e:dd:95:ef:0f:2d:cf:6e:
c9:f4:0d:f1:9d:83:08:a0:76:e4:c3:53:31:42:bf:
38:35:ff:56:fe:6d:b8:52:8b:7f:6b:0a:7d:49:f0:
c7:f2:26:08:08:01:02:ea:1d:fc:12:fa:f8:b2:c0:
fc:eb:07:ed:2b:1d:41:53:f3:88:12:d3:25:6d:72:
20:2f:a5:96:41:eb:92:28:4f:05:6e:78:40:c3:15:
cd:5a:53:fd:3a:ba:44:7a:c2:09:2a:07:95:cd:65:
63:d6:04:c0:81:e2:24:39:55:a3:23:cb:50:47:2f:
29:35:9f:c7:32:2f:18:b1:8a:e4:21:24:88:ce:e4:
42:dd:da:c6:9a:20:88:0c:30:6c:0e:8d:1a:18:07:
c0:b5:5f:64:60:91:70:72:6e:dd:4c:5b:de:84:0f:
11:bc:43:8a:78:49:5c:a3:ff:68:7a:14:93:5b:8b:
4d:69:dc:54:a7:35:87:a1:d4:a1:9d:ad:06:db:d4:
01:25:3c:55:10:e1:15:08:30:62:13:35:6c:34:93:
1b:01:38:a8:f5:df:8b:22:54:17:87:25:89:7b:c3:
03:12:50:82:6f:23:52:82:9f:7c:fa:91:10:27:a0:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:03:9E:66:85:2D:AA:02:DC:9E:54:4A:37:83:64:43:6D:A1:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b97019ce-19d9-382a-886e-71242a9828e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.132.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c6:77:51:5b:49:27:7a:7e:8a:74:e2:64:9d:47:cf:89:be:
55:d6:95:c0:e1:b6:bb:a9:39:27:12:24:e4:ff:be:32:c1:17:
2c:2c:86:8f:b4:6d:2a:dd:29:10:e3:d0:b0:0a:e6:32:3e:74:
30:08:4f:28:87:f6:ac:2e:a0:35:ba:db:ae:97:94:09:5d:35:
77:b7:b8:a3:e4:4f:13:f9:4b:81:f7:4b:a7:dd:d7:67:b7:a3:
bc:1c:0a:8a:c7:ae:5e:9f:55:fe:ec:e9:23:d2:4c:f4:03:76:
c8:90:b9:a9:29:88:2e:39:89:1b:44:09:4a:e9:23:46:6f:f9:
78:0e:78:93:62:aa:87:29:2a:92:51:8a:74:47:b8:c0:68:01:
9d:9a:7c:00:7c:6a:e9:32:7d:fd:82:e3:7f:9f:ee:c3:be:01:
f4:c5:e4:e8:8c:50:3c:22:37:7a:1d:d4:b0:e5:71:10:41:e1:
cd:69:06:4f:c1:e1:cf:1c:4c:be:24:3b:91:67:c5:25:8b:1e:
14:b3:08:1b:2c:61:23:3e:9a:f9:fd:1f:45:d0:8e:05:7d:f4:
91:94:fe:28:47:cd:5f:27:38:f2:3b:a0:51:ba:39:62:1f:c4:
f7:72:df:c4:bc:4f:b4:74:92:dc:08:8f:bd:43:0f:7a:ec:cf:
9b:fd:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:20 2025 by rpki-client