Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9614aa-ad52-3f16-8828-ec7a6130e0db.roa
File: cf9614aa-ad52-3f16-8828-ec7a6130e0db.roa (raw, json)
Hash identifier: okdydGis0EFAzmLRkZ1MYTw0f5CtbOdSlfZEAtIsCCA=
Subject key identifier: E0:C7:62:8C:12:96:AC:A9:97:66:06:C5:BC:D8:2A:75:EA:93:26:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96A933DE74539C494AB5D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9614aa-ad52-3f16-8828-ec7a6130e0db.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:a9:33:de:74:53:9c:49:4a:b5:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=be19d9ed-06ec-455f-85b7-1190a5316604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:84:19:e2:3e:56:34:24:47:fb:01:45:9e:
2a:7a:c8:77:9d:d5:fa:f3:88:d6:98:45:5c:7d:90:
69:09:a1:bb:e4:0f:89:34:7e:bc:8a:d6:9f:a9:fd:
12:55:9c:08:ae:21:29:ed:de:46:fa:3e:91:e1:4e:
4e:d5:99:a1:63:b6:50:b7:69:14:52:7b:65:81:cf:
34:d0:21:54:c2:06:a6:a4:c8:37:1d:08:cf:39:5f:
c3:4b:a5:35:45:19:06:9a:3d:1c:fc:5c:50:16:ae:
a7:63:2e:18:ac:2b:dd:0c:6e:fd:a7:7b:f0:5e:18:
3d:09:c1:fe:d2:a5:46:fa:09:de:a5:63:da:d3:8e:
2b:12:8a:8c:e1:ee:a9:21:3a:56:73:74:81:b6:bf:
62:f3:e0:9a:03:9c:ba:b3:fa:5b:36:c8:b2:3c:45:
bf:f7:0f:22:39:fb:77:db:5b:ea:1d:43:6f:88:9e:
9c:1a:76:2a:5d:f6:9d:1b:19:d6:23:bd:42:c3:c8:
f2:e2:1d:ed:3b:13:da:1b:d0:70:35:08:af:21:bc:
fd:98:be:6f:56:e9:fe:c5:db:96:a5:4f:03:93:49:
b3:be:90:89:08:a0:52:17:63:df:bf:f2:f7:41:c4:
ca:84:56:f8:3a:93:9a:77:d8:52:ab:84:7a:82:c0:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:62:8C:12:96:AC:A9:97:66:06:C5:BC:D8:2A:75:EA:93:26:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9614aa-ad52-3f16-8828-ec7a6130e0db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:5e:0b:61:9f:fa:37:bc:0a:3b:1d:c6:b4:33:c7:a9:a8:
27:0a:59:3f:5f:f8:a2:6c:bc:88:a7:52:38:a6:b2:0e:75:80:
2c:e3:64:1b:be:5b:89:3d:4d:3b:8c:c2:f5:56:a8:24:4b:c2:
a1:1b:79:69:05:8b:9f:0b:f8:59:75:1f:67:14:2a:e0:88:d9:
01:8f:c6:da:b0:cf:ed:0e:d7:f7:ac:94:35:69:38:50:d2:52:
8c:23:10:0a:8a:3a:72:b3:2b:71:8b:a0:a0:54:68:4b:3c:6c:
f9:18:7e:b2:01:9d:76:bf:1a:c4:bf:9b:66:7d:04:51:7a:a8:
cb:41:d7:0c:98:9c:c4:e4:0c:dd:6f:64:e9:88:68:7b:11:9b:
a2:1d:5c:5e:e6:8c:33:48:5d:94:76:3d:26:c1:cc:97:e9:2f:
b3:54:d8:06:55:d4:59:b9:77:b6:29:42:35:cc:e0:6e:40:b6:
88:45:40:9e:65:94:e7:ca:fe:49:b2:1c:84:42:05:0f:b7:aa:
f4:36:7b:62:9f:7f:c8:1a:72:0e:33:4e:8c:c6:6e:5c:de:d3:
db:03:10:cf:ce:3d:15:8b:b2:52:ae:5c:c7:98:e5:92:5e:fa:
f7:7c:a1:f0:ee:92:b1:37:76:af:1a:1f:f9:d9:b5:90:46:68:
aa:c0:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:29 2025 by rpki-client