Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9524a1d-1161-393f-a606-f50971d35e71.roa
File: d9524a1d-1161-393f-a606-f50971d35e71.roa (raw, json)
Hash identifier: TaH0jrC9p3aK5yya50612dTMUdN9OBuxfdsFuTFJHVM=
Subject key identifier: 2D:1A:38:D0:71:67:69:A4:0D:CC:2F:42:F2:4D:F7:77:32:B7:78:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3AD379E0A2CAE18DB11AB90
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9524a1d-1161-393f-a606-f50971d35e71.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:ad:37:9e:0a:2c:ae:18:db:11:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=3c24ffbd-3085-41fe-bae6-4d9414b5e726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:08:12:c0:06:07:da:0b:6c:b4:6e:97:61:
b2:d2:d9:c6:4d:14:05:19:24:3c:de:a5:ee:a9:da:
5b:61:40:10:c5:5d:f8:9c:e5:70:cc:79:8a:4e:bc:
b9:ac:61:ec:d8:d3:dc:8d:a8:da:31:c4:37:33:98:
85:6b:81:b1:42:87:e6:4e:44:af:87:60:a6:62:95:
0d:b8:57:ba:f3:03:d3:35:02:1d:6b:5e:00:f0:9e:
14:a0:85:16:e4:df:f4:d1:1a:64:3e:68:86:d2:f3:
05:7d:d9:dd:59:21:48:1f:68:bf:c9:6e:a1:00:bd:
1c:bc:65:72:89:50:cf:fd:07:74:18:46:0b:34:05:
0b:e7:e4:33:2c:cd:23:36:58:c1:63:89:db:8f:d6:
9b:75:c7:56:52:5a:eb:08:3c:d7:04:46:46:92:ad:
4d:13:4c:e6:4d:88:77:54:cb:5c:1a:d2:a2:da:03:
b4:ca:26:5f:af:3c:59:e3:d9:39:0e:d8:8d:1a:55:
8d:30:d5:41:96:5b:39:29:19:b2:01:a2:e9:b4:4c:
dd:64:99:ff:01:ca:b5:79:d5:b5:df:13:8e:6e:35:
04:ad:0f:90:bc:44:c8:e4:1d:45:34:37:0f:80:b0:
94:1b:0b:f9:a0:30:43:80:72:e2:43:25:50:f0:8a:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:38:D0:71:67:69:A4:0D:CC:2F:42:F2:4D:F7:77:32:B7:78:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9524a1d-1161-393f-a606-f50971d35e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:dd:d5:bf:5a:08:b8:f3:e5:d6:c1:d4:dd:dd:eb:c2:80:05:
4a:43:29:5b:99:36:7b:25:16:e3:04:fd:90:c1:67:48:05:55:
db:44:ba:e6:da:ca:e7:a8:08:ef:b9:25:3e:8c:55:b6:ef:af:
f7:9f:24:8f:7d:50:a6:17:f4:c3:eb:13:e5:a4:31:17:bf:38:
9e:8e:54:53:fa:2a:e2:ef:f7:af:f3:7b:4d:eb:61:92:5f:27:
16:53:bb:40:77:ee:ea:ed:00:ee:29:94:6a:01:2f:71:b5:05:
82:0c:2a:6a:22:2c:ef:c1:3c:5c:b3:9e:ae:3d:eb:50:ee:80:
f1:43:3b:52:d9:4b:38:4a:0e:28:ec:36:0c:32:db:47:2a:97:
e2:ca:11:37:d9:d3:b6:99:be:fc:35:31:ce:03:58:aa:2b:03:
76:ad:d7:30:13:e5:4c:2f:76:24:f2:6d:05:0e:d7:bd:89:3e:
65:c2:89:0d:86:16:61:13:a3:3d:7d:05:73:fa:9f:d9:6a:11:
1d:6d:d2:56:e1:70:68:fd:38:e1:1e:a0:88:bb:e0:53:ea:ea:
24:29:f7:43:37:3a:89:8f:ac:70:04:7e:d9:be:17:74:11:0a:
04:c2:3e:57:6c:17:3b:eb:1d:dd:6e:50:97:fd:25:66:81:1e:
22:ff:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:23 2025 by rpki-client