Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2feec43-b874-381a-8a19-0abd2aa0a4da.roa
File: c2feec43-b874-381a-8a19-0abd2aa0a4da.roa (raw, json)
Hash identifier: JsCqslMDYpiz0R0R0P/to3+RaFhx9S6QH5EdgWvayiI=
Subject key identifier: 78:31:42:4C:72:31:5F:C4:46:5A:3C:64:60:12:60:C5:FB:C2:4D:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5964FAA0E17C937E0ACF4880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2feec43-b874-381a-8a19-0abd2aa0a4da.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:64:fa:a0:e1:7c:93:7e:0a:cf:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=fa092be4-7947-4001-90ed-551434228480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:05:fb:28:c9:89:2d:d6:00:5e:a9:ba:e8:
e2:73:57:a6:38:54:2e:1f:9a:87:f3:d2:03:80:ba:
3a:bc:9a:47:25:a5:65:18:45:9d:73:f2:9c:22:2a:
37:fe:06:1d:90:23:08:c1:07:29:6d:30:86:59:ca:
e4:fc:3a:82:e4:68:32:17:51:9d:fc:6a:38:93:25:
07:62:30:fc:4c:f1:62:7f:c7:d6:e3:13:57:cd:59:
a2:04:80:ca:f4:16:c0:bd:0a:9f:14:0a:0c:aa:c2:
47:50:31:78:a6:7d:57:e4:15:43:2f:7f:5b:8a:61:
85:8b:c1:15:da:57:89:4d:36:05:b0:09:10:5f:51:
9c:e6:83:48:1a:75:7b:80:38:28:b3:d6:d6:ce:e3:
20:78:17:d9:30:95:52:1c:6d:b2:0c:bf:67:78:c4:
1c:84:fb:64:24:18:69:ef:65:9b:73:e3:39:bc:dd:
1c:19:29:5b:51:da:ba:50:71:28:58:6f:1b:43:98:
f8:72:a0:66:50:02:e5:87:45:c4:b2:51:6a:3a:95:
14:3f:4f:b8:7e:8c:57:66:5b:5d:fe:76:bd:ba:38:
d5:6b:e8:9b:3c:69:ba:4c:cb:9b:a3:a6:5d:2c:c9:
f8:50:35:dc:b5:54:d4:29:26:dc:41:0b:17:e1:b3:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:42:4C:72:31:5F:C4:46:5A:3C:64:60:12:60:C5:FB:C2:4D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2feec43-b874-381a-8a19-0abd2aa0a4da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:e7:16:7f:a5:64:80:db:93:1b:1c:3d:74:25:e9:92:4a:62:
bb:09:ee:e9:00:85:33:39:28:8b:70:d8:8f:4a:78:7c:30:22:
f4:2f:13:0c:69:1b:f6:49:67:14:5b:b8:25:55:1f:a1:57:58:
15:75:7a:ca:fe:1e:20:fe:a3:ff:f4:6e:ff:54:45:80:ee:27:
9d:71:95:26:08:38:06:da:bf:7b:73:5c:7a:4e:08:9b:00:16:
c1:73:4b:56:a9:7e:a2:f3:ca:26:0b:1b:e5:84:1a:20:d4:fe:
68:f4:9e:7e:f0:60:41:10:49:61:de:7d:7b:a5:4d:23:79:5d:
65:63:e5:20:2a:58:8a:12:9b:32:3d:65:1e:bf:5a:a6:0b:f6:
86:47:df:b8:ae:0c:54:78:fd:2a:72:48:01:b1:2f:7e:4b:9f:
34:5a:1b:95:c9:61:18:a3:2d:c6:01:32:6b:5e:89:70:38:bf:
9e:5d:87:e1:a7:c3:cf:a7:6e:1f:18:7d:bc:4a:0a:84:f4:1c:
03:40:84:d9:de:fb:36:c3:d1:ac:32:a6:5e:93:94:9c:35:3c:
26:87:98:01:93:5a:bb:0f:7a:7f:69:c8:19:d1:69:63:67:9b:
8c:49:8c:a9:80:4b:74:56:53:fe:cd:9c:2b:13:99:ff:8b:34:
d4:fa:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:27 2025 by rpki-client