Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd842352-21db-3486-bcd2-83cfb1c4a8b5.roa
File: cd842352-21db-3486-bcd2-83cfb1c4a8b5.roa (raw, json)
Hash identifier: QyStW4aR2RIZHKuWuxWfRlTyNX6a/jO1cAo6cW9topg=
Subject key identifier: D6:3B:46:A8:E1:C5:7B:96:E9:12:F7:B1:B2:C9:24:11:95:33:29:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E44556D126B71EE79849E926C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd842352-21db-3486-bcd2-83cfb1c4a8b5.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:55:6d:12:6b:71:ee:79:84:9e:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=a7cc191e-74a1-4f8e-a4d1-3fa6b8651600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:25:87:99:f7:19:5d:47:92:6f:d7:9d:d1:
37:42:11:72:ec:35:1b:56:4d:c0:5b:db:78:15:2f:
40:fb:08:d8:11:9b:78:16:6d:c9:15:3a:36:f5:b7:
b9:8e:ab:c2:0f:4f:52:12:ac:d9:bd:60:a6:34:95:
45:fc:96:4e:4b:05:03:07:5e:4f:29:a8:13:08:86:
61:36:81:e9:46:4d:92:05:31:2b:57:62:a5:50:47:
fe:3b:60:71:80:53:a1:b0:7d:da:62:26:b5:26:59:
1b:45:1e:f9:27:b5:5f:f4:f2:00:86:2c:9c:ee:e8:
2a:e1:4f:87:64:9b:e5:dc:dc:0a:38:14:ad:ff:f8:
b3:4c:e7:1f:8b:9a:44:40:f9:b4:49:fe:52:52:a6:
09:c9:72:e8:b7:a3:07:a3:72:70:dc:ac:e7:e4:52:
a6:97:66:60:c7:07:53:6b:0e:4c:78:c1:94:ab:58:
ae:61:2c:bf:97:3c:a0:dd:10:39:62:6d:d3:da:b4:
b6:ad:12:a6:93:03:51:1a:89:2f:20:02:44:5f:1c:
80:61:fb:68:a3:b7:5b:a4:1b:1c:2b:78:a9:d9:bd:
d7:f0:57:8c:52:0f:5f:d3:28:ac:89:dd:f3:4f:d9:
4b:2b:62:1e:4a:25:78:b3:db:5c:21:80:1d:c7:aa:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:46:A8:E1:C5:7B:96:E9:12:F7:B1:B2:C9:24:11:95:33:29:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd842352-21db-3486-bcd2-83cfb1c4a8b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c9:08:36:fc:92:70:9d:83:14:bd:55:6e:06:a1:d7:70:7b:
fe:3f:96:7c:a3:90:92:68:d1:37:7d:4b:eb:9f:03:e8:11:3e:
46:5f:04:d0:a9:5c:b6:89:90:57:53:e7:73:10:72:c9:2d:d4:
7c:67:3d:99:c0:ea:0e:76:0d:5d:e0:cd:35:64:5b:7c:33:88:
99:8e:62:53:85:9e:cb:69:9c:e9:22:7f:90:f6:34:9b:81:d7:
77:31:b1:e3:4a:01:62:ea:f1:a7:3e:cb:e0:7a:e6:b1:5e:18:
c0:74:d7:aa:39:a1:e8:1c:d1:3b:4b:e4:25:95:0e:81:f9:60:
5d:e4:94:c4:c3:8e:dc:51:0d:13:3d:0d:b0:28:27:a5:cd:6a:
aa:15:b4:35:c6:7b:b6:ad:b5:15:66:80:96:97:e5:55:57:ab:
69:e1:43:dc:63:c0:ee:0b:75:69:d0:a6:b2:1b:1e:a4:23:11:
1e:97:e1:72:cf:69:76:20:37:24:de:46:a2:0f:98:26:2d:5e:
7a:53:cf:86:d0:0f:3e:fd:70:be:6d:96:b0:6a:52:d7:ee:18:
94:1a:58:7e:b8:ef:21:e7:19:db:f1:9f:22:1e:bd:48:c6:9f:
b3:5f:57:90:c4:2d:55:c7:11:ff:2f:38:7d:81:7d:c8:9f:17:
ad:2e:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:48 2025 by rpki-client