Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de25b54d-1998-3fbc-8aaa-5e05ea4f2ec5.roa
File: de25b54d-1998-3fbc-8aaa-5e05ea4f2ec5.roa (raw, json)
Hash identifier: O7sEwmMGbH8pOCxmPt7Ws9omaPGKJdK55rAt76hrJjk=
Subject key identifier: 3A:B1:12:E4:85:B9:80:C1:D1:2C:20:10:A5:FE:AD:BE:59:D9:65:D3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7D62DE436861AF1AEFD25180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de25b54d-1998-3fbc-8aaa-5e05ea4f2ec5.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:62:de:43:68:61:af:1a:ef:d2:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=a2ce7a26-efa0-4a38-ad52-dde64e2e2ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:90:37:fd:23:9f:78:aa:1f:88:3f:b1:92:
78:e9:70:b8:a9:bd:5c:0a:cd:99:6c:0b:bf:48:7f:
62:81:ac:87:5e:2f:ac:7a:06:65:32:7d:9a:7d:b4:
f3:75:d8:b1:88:d8:8b:44:80:ac:b8:e1:5e:dc:6d:
5e:4c:75:f4:e8:60:0b:62:6b:74:e4:1f:9a:ee:b9:
ff:d7:29:69:48:0b:a5:f6:a0:07:89:34:c3:36:10:
5c:45:29:8d:9d:08:e8:5c:9a:81:83:8e:16:fa:88:
fc:b5:5d:b9:53:90:b2:24:9c:c7:a3:95:56:d8:62:
f5:6a:7c:62:e4:38:b6:85:88:45:70:22:82:0c:5c:
65:6a:4d:49:e2:d5:d2:2e:3f:38:98:f0:3b:31:74:
bd:72:f5:0e:c4:79:cb:0a:af:74:f8:2f:bb:b9:ee:
6d:13:8d:ef:62:aa:4e:77:db:77:05:c4:5f:51:35:
65:05:2e:80:da:1d:e2:07:89:f7:2f:c0:fa:f5:10:
cf:ab:a5:4e:cd:b4:2f:08:8e:a9:5d:41:96:24:66:
ad:67:36:9e:ad:5f:6f:9c:30:31:c8:cc:19:5d:c0:
39:89:f1:e2:a3:95:fc:90:30:0d:c9:b6:0f:bc:f5:
8e:8e:4c:37:c4:2c:ee:ab:91:1d:ae:bc:e1:55:7c:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:12:E4:85:B9:80:C1:D1:2C:20:10:A5:FE:AD:BE:59:D9:65:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de25b54d-1998-3fbc-8aaa-5e05ea4f2ec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:f6:ba:31:fa:26:b5:e1:e6:9d:4d:9d:68:b0:77:42:5b:37:
b6:ea:e1:e5:28:1e:ab:03:50:c2:b5:d2:dc:06:21:9d:1c:2c:
ed:7c:e8:7c:fa:40:e4:72:c7:cf:02:f6:d1:b4:be:46:16:27:
5f:ec:cb:05:88:fb:08:29:0d:8d:5f:63:10:2d:29:d5:bb:f6:
95:70:a8:f1:ad:0a:29:69:0e:32:b6:c9:4d:5c:0e:e2:a9:7f:
85:2b:27:76:60:74:8a:ed:9b:fe:ee:8f:64:1e:6d:c8:86:fc:
ef:46:a2:21:29:e8:d7:d7:b5:89:36:09:7d:b8:06:9a:aa:e0:
92:71:33:c3:75:9c:c7:d7:b9:88:50:0d:d0:89:f0:10:3f:97:
88:c6:eb:69:51:34:1b:ea:92:7e:7c:25:f0:10:50:c1:0f:0e:
9b:51:36:9d:4f:9a:74:79:b3:7d:0e:5d:65:ed:5e:25:58:c7:
78:1f:53:2b:c6:8f:4c:de:5f:97:0f:14:74:8e:e9:35:d8:ad:
4f:fe:ea:1d:0b:26:0a:a2:1a:42:be:e1:67:fe:9f:18:c0:21:
ac:25:d5:7b:bb:f7:fa:92:38:48:a5:4c:59:20:ff:8d:fb:7c:
a1:9d:31:71:c0:54:19:de:e3:e8:74:79:e9:71:00:1b:2d:49:
c1:7a:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:42 2025 by rpki-client