Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2657b1f-15ae-3c08-8e6f-168ca1de5961.roa
File: d2657b1f-15ae-3c08-8e6f-168ca1de5961.roa (raw, json)
Hash identifier: i/4qD3AZtgKCPm5Xo0YYk2UqPsRpRQSPW4blDoIRJFw=
Subject key identifier: 16:AC:A8:7E:5C:15:60:4A:59:0B:1B:79:E9:6F:C0:C6:56:86:41:9E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C962DECF55577FC5799709440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2657b1f-15ae-3c08-8e6f-168ca1de5961.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:2d:ec:f5:55:77:fc:57:99:70:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=411f45d9-7012-48f9-8c83-c449c02705df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:30:02:60:31:d8:7e:61:fe:41:d3:1c:a0:
3f:43:f4:ea:ca:34:9d:47:b5:80:ef:e9:d5:c2:db:
43:bb:e6:76:86:e8:bd:b2:a0:d8:64:47:8b:6e:03:
dc:bb:e4:04:7d:01:4c:1c:78:7c:b1:dc:d3:10:05:
9f:4b:c1:33:79:fe:1d:69:de:e4:b8:79:1c:b7:16:
41:4b:10:84:58:9b:6f:30:8a:85:1f:38:bd:de:de:
c0:5f:fa:85:5f:14:83:2a:32:b0:f5:b6:f0:ea:7e:
20:48:4a:dc:c6:99:3c:d3:4d:9b:1d:7b:e4:4e:51:
95:31:fd:69:39:c1:7c:17:7e:55:95:bf:4c:5f:6f:
fd:3c:5e:ab:ea:7f:93:f6:4d:0a:13:b0:23:9a:b3:
84:f1:7d:59:83:cd:cb:d8:0c:cb:be:8b:a5:23:41:
42:d8:9a:cc:d9:c4:30:79:e1:a2:48:b4:d8:d4:dc:
3a:db:92:4a:5f:03:54:b4:f9:45:6e:95:0a:9a:f2:
b6:06:01:12:43:36:08:08:07:dd:bd:d8:b8:d9:df:
61:e3:df:13:d7:6b:4c:8c:8e:59:98:e7:30:8a:b3:
4e:4d:1a:6b:75:c1:c9:dd:e2:8e:15:26:50:37:d1:
c1:79:91:25:08:cc:a3:13:3d:74:89:6e:42:ac:1c:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:A8:7E:5C:15:60:4A:59:0B:1B:79:E9:6F:C0:C6:56:86:41:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2657b1f-15ae-3c08-8e6f-168ca1de5961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:91:51:86:f6:10:cf:a4:a7:bf:fb:f7:7b:d7:46:76:cf:35:
a7:45:11:f7:7e:e3:d7:03:40:0b:ff:fd:0e:de:98:53:da:d8:
b4:71:e9:42:d3:33:82:5b:23:49:2a:bc:d5:c0:f2:02:68:39:
80:61:75:68:c8:33:b7:67:7c:40:65:94:f4:6f:2e:d7:2f:3e:
91:04:65:db:51:38:16:5f:9c:f4:2f:fc:a8:3f:f1:0b:12:43:
74:33:62:9d:14:ce:34:29:74:ec:e9:66:c1:42:fd:88:d8:69:
6a:80:7f:0e:df:73:fc:7b:98:4a:f8:ac:6c:7b:91:e5:66:7e:
b3:ee:54:b9:2a:29:5c:5a:3a:ad:3d:e5:5d:e7:75:23:56:53:
1c:16:72:f3:8a:5c:52:25:ec:18:be:79:ac:aa:6c:92:c3:cb:
f4:26:d0:07:9d:fb:00:2e:7a:f2:de:79:c6:1f:d5:94:f6:fc:
ba:5f:49:7d:e7:05:78:58:c2:3a:c5:85:3e:a0:78:23:d9:24:
3f:53:c1:a6:f6:d4:52:73:8a:79:53:89:10:74:08:c6:f9:7f:
a5:e5:55:31:d5:84:9c:06:8f:7d:ff:49:13:d8:4c:d3:38:19:
6e:ab:ad:51:15:61:c1:43:6a:8d:c8:f7:78:49:0e:bd:71:63:
0e:e0:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:37:07 2025 by rpki-client