Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/deb61042-8ce7-3b78-8300-c3c5aa08c66a.roa
File: deb61042-8ce7-3b78-8300-c3c5aa08c66a.roa (raw, json)
Hash identifier: ZyONWkbeXrTgWWP2WUkYXpd//AsTX0slFX+aKf5vGjc=
Subject key identifier: B6:2F:AD:27:3D:CF:EA:C9:79:8C:B9:BA:0D:E1:CC:0E:03:C3:FE:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD30971D4240AFAD4AC31A500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/deb61042-8ce7-3b78-8300-c3c5aa08c66a.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:09:71:d4:24:0a:fa:d4:ac:31:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=2c1bc869-688d-4177-8ee6-9eb89a393213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:8a:b4:90:3e:82:6b:ba:c7:aa:13:25:1f:
70:cb:c7:f6:df:f9:ab:61:7d:3e:48:26:92:11:b4:
06:40:0e:ce:a3:a3:e1:31:9b:b7:31:05:5c:1c:dc:
15:40:1e:bd:a8:21:5a:18:02:67:20:00:15:03:ec:
ce:ad:c4:bd:3f:ab:8f:59:f2:e4:6b:09:52:33:c9:
2b:62:90:b4:ed:09:10:50:59:53:63:2d:04:45:52:
eb:6b:a5:ff:25:1f:3c:d6:25:0e:22:13:ff:7e:4b:
f4:5c:1c:9d:43:4b:07:77:96:d1:80:f1:8c:7f:53:
1b:5d:94:c6:75:2a:37:ab:85:89:50:0d:23:9c:10:
34:6b:6e:f6:13:0e:0c:06:f3:fc:2c:e7:d6:45:05:
7a:0c:9b:3a:19:74:05:6f:0d:14:fb:be:49:b5:1a:
84:3e:5a:22:ed:74:0f:52:81:d4:14:37:6b:64:55:
9b:f2:9e:ae:ad:be:34:32:d9:98:52:c3:91:d3:4a:
f1:d4:50:d4:f4:ad:b7:49:e0:60:46:ee:23:8e:10:
48:1b:7e:29:4b:35:ee:7f:54:55:a1:73:3c:75:cc:
ba:c3:e3:b0:fa:dd:cf:65:cb:65:86:1f:7a:33:1c:
27:e7:99:33:14:e3:a8:25:0c:c2:6c:ec:bd:90:8a:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:AD:27:3D:CF:EA:C9:79:8C:B9:BA:0D:E1:CC:0E:03:C3:FE:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/deb61042-8ce7-3b78-8300-c3c5aa08c66a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.244.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:0d:84:77:e4:d8:32:1c:28:0f:b2:d4:34:be:cb:16:f1:b8:
4c:b8:12:4a:b6:3b:8c:eb:2d:9b:90:07:e0:f1:44:6f:11:89:
ce:ac:11:86:23:22:4d:15:30:06:b1:49:0e:8a:35:38:3b:57:
e1:83:6e:10:be:27:17:c8:c1:3d:62:7c:d6:f5:81:2d:51:88:
7f:85:3b:2f:c7:51:39:28:34:e4:99:df:33:ba:1e:60:81:d0:
3f:2a:93:0f:ac:c1:32:a7:5f:32:0b:c4:59:92:4d:9b:50:68:
56:d3:9d:62:3c:73:60:94:91:e0:c2:ee:4e:cb:15:ef:b4:99:
d4:7a:ce:62:15:c7:cb:7f:dc:48:2f:6a:94:51:49:d6:fd:58:
04:48:98:16:aa:f0:2a:50:c4:b3:78:2c:0f:fc:23:b3:87:68:
34:a5:bc:63:27:42:4c:7e:0f:b2:ad:81:c8:14:9e:9f:92:06:
28:60:fa:b5:cd:cf:75:9c:0b:39:04:e8:48:4d:df:ad:ff:06:
96:6b:c7:54:80:8e:73:c6:b4:94:ba:d5:33:28:0a:18:bb:ae:
15:59:b2:d8:b9:9d:76:2e:14:fd:a4:71:73:10:7c:3c:76:e6:
80:03:33:98:04:12:ad:b2:aa:6b:e7:df:85:bf:ce:0f:7d:e3:
d7:5c:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:38 2025 by rpki-client