Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc93eb49-3d6c-35d8-afcc-b95180610cda.roa
File: cc93eb49-3d6c-35d8-afcc-b95180610cda.roa (raw, json)
Hash identifier: hDYj6OX8touxkzm/Mjwo7PExeMy0QxzIzOjRqblPljs=
Subject key identifier: ED:A5:76:8C:27:97:12:9F:0A:C8:64:70:19:01:62:8A:9D:E7:19:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E21345DD9988CD44E7A02D100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc93eb49-3d6c-35d8-afcc-b95180610cda.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:34:5d:d9:98:8c:d4:4e:7a:02:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=07c646a4-b8c3-481f-878d-0579b9479302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:7f:3c:e9:b6:94:76:7e:b4:0c:49:b8:6c:
1a:8b:c5:15:d9:4c:1e:f0:a1:5a:96:a5:a8:89:16:
e0:d7:46:0d:41:17:4c:ac:ef:e6:a5:51:00:76:c7:
01:54:fd:fb:c3:a4:12:e5:9f:fd:f2:09:e7:90:6d:
ba:4e:e3:88:d3:26:6b:d1:9e:b6:b2:7a:ba:cd:1d:
b7:9d:a7:99:fb:80:8c:9e:83:cd:e6:42:4a:4a:f1:
4d:76:32:a8:21:b4:61:08:35:f9:50:34:2a:2e:79:
39:43:29:c4:ad:ad:c4:ae:02:79:f2:cf:6c:ef:c0:
ef:70:2a:aa:1f:4b:4d:4a:ad:e5:0a:4f:42:17:ae:
0e:fa:50:a8:fe:dd:49:0b:15:85:50:e6:5c:3b:03:
74:46:6c:d7:29:cf:d6:b8:4d:29:f2:68:5f:f2:d8:
6d:3d:ee:6e:f4:6b:65:b0:85:18:ff:80:60:b7:dd:
c9:67:2b:b5:74:cc:53:39:93:33:b3:db:09:75:5e:
dc:9e:e8:cc:6f:9d:84:9c:ab:40:26:66:a6:7b:76:
7f:59:ea:8d:aa:3f:72:b0:6c:a7:96:2a:1b:06:83:
f6:30:f8:32:ac:6a:83:68:71:8d:fe:05:1b:70:f2:
49:c8:12:df:ba:13:70:1d:d5:89:04:c3:6e:3b:8e:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:76:8C:27:97:12:9F:0A:C8:64:70:19:01:62:8A:9D:E7:19:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc93eb49-3d6c-35d8-afcc-b95180610cda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:c4:9f:14:f1:cb:ca:8d:de:30:c7:35:8e:19:93:fc:e4:0a:
10:52:53:fd:ac:57:51:21:cc:7d:f4:dd:bc:1e:7e:ae:3f:fe:
c5:3a:d7:44:c7:6a:c2:53:ef:25:82:eb:44:c0:e8:8b:92:a6:
15:3a:33:70:db:4d:40:06:d3:06:8b:60:64:ad:d1:0b:1a:5f:
2f:fd:e7:3e:1b:2c:e9:4b:18:3a:34:12:50:c1:fc:ec:c3:d0:
d5:c7:f5:75:01:b5:3d:11:67:b2:ee:28:84:20:8a:56:f6:27:
f0:3b:55:33:af:a4:65:1e:09:07:3d:79:c4:7b:83:9b:14:2e:
a6:43:7a:ad:05:d5:23:c3:8d:22:e6:1c:10:97:9a:4f:da:10:
c4:8c:4a:e5:d4:0d:74:3e:d2:2d:7b:27:c4:d6:49:bd:e7:c8:
fd:51:73:86:eb:c0:0b:dd:04:6a:41:09:ad:21:07:08:7f:3f:
13:f8:7f:48:0d:46:6f:fe:04:d5:09:7f:05:45:72:72:2d:58:
b9:e7:1c:d1:aa:07:e5:6a:75:69:13:8a:93:ef:ca:6a:50:f8:
50:96:85:fc:5e:8d:a1:0e:f6:79:e7:c7:8e:d5:7a:84:4c:ec:
be:13:70:32:2a:13:3b:23:f6:d1:22:4a:a1:cc:83:36:53:b7:
3d:bf:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:46:07 2025 by rpki-client