Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1d03d49-9d0b-3c7c-8ec6-348ac439c5d1.roa
File: c1d03d49-9d0b-3c7c-8ec6-348ac439c5d1.roa (raw, json)
Hash identifier: n4CrdeZI6IQrVjoJcbf22Z+6B8bJpRkUmtgRd5Uoby0=
Subject key identifier: 51:D4:33:F1:A4:9A:79:57:B0:42:02:F7:6D:0F:56:E4:F0:8D:93:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B7CE783AA0523AF428B8F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1d03d49-9d0b-3c7c-8ec6-348ac439c5d1.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:7c:e7:83:aa:05:23:af:42:8b:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=b7190188-8bfd-4c94-a6c5-ed4c6e767f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:d6:0f:0e:3c:c1:d8:ea:bf:01:cf:ca:fb:
49:2a:0d:fb:6b:67:93:06:5f:82:18:80:ad:66:95:
f9:58:10:6a:8f:00:f4:78:ea:e9:5e:4e:33:8f:d4:
1f:b7:b4:f1:51:84:82:e7:37:08:a6:d6:73:d0:c6:
aa:8f:5c:e3:f3:e7:8a:1f:77:e9:fb:39:2e:1c:eb:
ea:9f:a0:d6:eb:cc:b3:ce:67:e4:88:73:57:e0:2a:
7b:7c:b7:1c:27:92:21:e1:97:12:18:d1:0c:90:58:
3c:08:d7:31:fa:43:44:12:d0:bf:e4:ce:de:17:26:
87:61:0a:0d:a6:72:34:ee:a4:20:3b:55:58:cf:3c:
7a:21:3e:52:60:78:4c:c5:b7:3f:f7:0c:69:19:4a:
ed:a7:51:8c:d9:7d:0f:09:c0:ba:41:13:9e:77:d0:
ed:a0:8f:a8:d2:79:64:df:3e:31:07:98:79:3a:8a:
35:67:ae:d4:e6:4e:e2:e2:b2:ac:72:82:6c:5b:ba:
89:97:fc:a6:58:6c:76:7a:03:f7:06:38:54:78:17:
a6:3b:b3:17:ba:26:6d:39:11:4f:cf:03:ec:f7:68:
5c:4e:4d:34:b6:51:ce:7b:c2:15:d2:37:f2:e5:aa:
39:4e:90:93:9b:62:d4:b2:ef:c0:09:e9:e1:80:35:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:33:F1:A4:9A:79:57:B0:42:02:F7:6D:0F:56:E4:F0:8D:93:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1d03d49-9d0b-3c7c-8ec6-348ac439c5d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.198.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b5:50:38:99:86:31:9a:52:c0:a3:d9:85:30:d7:4c:43:ae:
d6:ed:20:b3:ea:04:ce:9c:93:9c:ef:15:b3:02:35:da:da:b7:
2a:91:cf:6b:24:73:17:7a:87:3f:fa:bf:37:90:e5:1e:c7:5e:
e3:99:41:1c:82:48:5d:3c:96:6b:16:2f:6b:87:50:02:33:66:
c5:a0:92:54:dd:8d:ab:a6:03:e8:54:86:95:b9:0d:91:d5:16:
d7:6e:ca:4b:de:06:c2:67:2a:9c:89:de:0f:f2:3d:75:c4:80:
22:a3:ab:20:24:d1:1a:98:d8:3f:09:66:bc:cb:56:c1:cf:18:
19:e2:7c:8b:cc:5f:95:18:fd:a6:82:36:6f:0e:4a:1f:43:0d:
91:2e:95:9c:32:4f:cf:74:fa:27:84:7e:d9:35:5b:d4:b4:fb:
71:42:a4:6b:56:38:d3:b9:60:8a:b1:8f:f5:c3:ca:3c:19:fb:
5b:8d:6b:4f:f8:64:20:2f:50:2d:75:c0:6e:ea:7a:ed:96:76:
e8:17:f4:5f:74:7f:99:68:fd:7b:d8:d9:5b:2d:ea:58:db:af:
16:45:c7:f1:ee:a5:00:ee:6a:b3:fc:25:0e:bb:32:02:11:ce:
d2:72:22:d1:eb:db:03:c0:57:25:8b:25:1a:1b:c4:52:3b:52:
33:62:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:05 2025 by rpki-client