Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d531b6af-9acc-3f82-8747-fcea648a046a.roa
File: d531b6af-9acc-3f82-8747-fcea648a046a.roa (raw, json)
Hash identifier: 71S7KxfLG05rh5Wlt80VibZoCUbQnK+mq3CdzfLMgcw=
Subject key identifier: 61:DD:44:7B:C9:11:B6:1F:CC:36:5A:FC:C5:B0:73:91:F7:00:95:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA174EBB13C6258DF30B8700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d531b6af-9acc-3f82-8747-fcea648a046a.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:17:4e:bb:13:c6:25:8d:f3:0b:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=7adebc9f-91bb-4526-8eb6-7e52a9b2f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:6d:8f:d1:ab:5f:9e:5e:40:dc:6b:79:89:
e5:29:1c:b0:40:3b:10:fc:cd:e0:78:9d:0b:8a:3a:
e3:21:23:c7:37:70:75:03:d6:06:e0:32:4d:ab:b1:
ef:2e:26:f2:87:df:2c:82:78:bd:98:4a:20:dc:0e:
d7:9b:9f:6b:b5:3e:a5:86:d2:63:12:b6:da:f8:ac:
89:c6:96:88:e2:01:05:49:ed:e6:7d:26:b2:e0:8f:
a6:dd:c3:01:d4:b3:4f:ff:d4:e1:87:4e:36:ba:3b:
8a:53:4d:0c:87:a1:9a:99:85:c4:46:dd:3e:1c:3c:
08:4b:aa:20:ea:fc:4d:de:e6:92:3e:b6:26:45:63:
ad:fe:de:08:17:99:fe:57:2f:2a:2b:93:91:47:2a:
87:b4:15:6a:fa:90:2d:a6:0d:55:61:c4:37:38:7f:
67:71:1f:9c:17:31:6d:1b:95:ea:11:50:a9:19:68:
ad:01:1b:fb:0f:b0:4c:ab:47:0c:f5:0d:00:55:a7:
2c:e4:19:66:aa:57:9b:9f:a1:f2:88:0d:39:43:34:
e9:6f:a2:1b:a1:8a:b5:60:40:24:dd:6e:47:b0:43:
aa:8d:7e:cb:7d:52:81:00:88:e3:a2:3a:af:1a:42:
c7:88:82:e3:07:fe:7f:46:c3:53:a8:00:8b:b3:0a:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:44:7B:C9:11:B6:1F:CC:36:5A:FC:C5:B0:73:91:F7:00:95:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d531b6af-9acc-3f82-8747-fcea648a046a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:31:31:ad:2f:ed:09:ff:61:b3:e2:28:4b:c0:86:73:ff:a3:
5e:c3:38:ab:ba:a7:1e:86:10:a2:78:bc:61:b8:2d:fb:e8:8e:
8c:39:9e:97:ea:e8:41:94:b0:92:e3:d2:4e:21:84:d1:cb:fa:
f5:43:3a:11:7c:f8:24:7e:ff:7e:a1:be:e0:d2:fb:de:94:e8:
d5:34:de:71:40:6b:73:24:81:ac:8d:38:79:b7:cb:99:53:3c:
f8:86:bb:d3:d8:e6:a5:85:2b:e6:4f:5b:8e:55:05:97:ee:c9:
0e:cd:e9:39:84:71:a0:87:a6:43:ad:0f:d2:ed:06:6a:a2:48:
1b:7c:b3:0b:ca:20:c8:e9:68:78:96:67:e2:25:ea:7c:a1:b9:
3d:f2:34:7c:31:c3:9f:26:6e:1e:f3:15:6b:57:36:a9:7a:28:
e4:43:de:26:9b:f9:1a:67:a0:35:70:2a:af:d5:74:dd:b2:8b:
a0:de:4a:92:52:27:32:dd:0b:52:87:ab:0f:52:e6:d3:09:cb:
41:3f:5e:16:ab:68:b5:e3:cf:49:69:07:b3:38:0d:44:65:a9:
de:2a:4b:5f:50:26:e2:3a:a0:62:87:22:f7:71:96:b6:c9:24:
aa:75:98:94:47:b9:9c:e1:fe:bc:7c:b2:ec:79:26:0e:3a:0d:
78:57:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:26 2025 by rpki-client