Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfb0c2b8-5db2-320b-96fe-3321e9ab8b1b.roa
File: dfb0c2b8-5db2-320b-96fe-3321e9ab8b1b.roa (raw, json)
Hash identifier: LO0EkxOpiEiBXPpjf8CtReKLOHb/awpcDbzv/wkt34A=
Subject key identifier: 06:60:85:F2:B8:46:26:57:BC:7B:E5:87:3C:73:91:B4:6C:D8:3D:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD58ED48A63A29792B320F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfb0c2b8-5db2-320b-96fe-3321e9ab8b1b.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:58:ed:48:a6:3a:29:79:2b:32:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=30a82bff-875a-4d1e-b845-f00938e72f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:7b:b4:0a:34:fc:9f:0a:06:46:48:e4:48:
3b:00:fd:5c:08:37:e4:a5:59:b4:32:42:47:a5:39:
b5:f1:2f:6f:fb:ba:2d:d3:fb:eb:d3:f6:78:42:4f:
00:d2:60:30:e0:16:d2:e3:d4:27:6c:6f:7c:04:d1:
9a:9d:0b:e8:38:15:d3:a7:dd:04:75:d4:74:a3:51:
46:e9:c0:70:83:33:45:2c:35:74:2e:d8:87:e4:ed:
cc:40:6d:62:31:b8:5f:b3:97:8f:cb:23:e5:63:b5:
e2:61:dd:e2:b2:2a:42:26:47:0d:29:c8:18:f8:cb:
df:15:c6:89:c1:21:9d:4f:1a:0c:40:29:84:77:8a:
8b:16:ae:5e:ac:32:9a:29:fb:a4:c5:1b:55:ed:6d:
dd:9b:cf:1a:d9:a5:ae:41:35:62:dd:fb:20:2b:e5:
c6:8b:a9:74:61:16:1d:a0:56:a6:99:0f:ad:fe:70:
09:3f:d8:38:c5:1c:9b:35:4f:c5:85:4a:3a:1d:c0:
05:54:bd:7e:f7:1d:a1:ac:18:8b:92:ac:86:1a:25:
63:90:88:b3:a3:dd:3d:1d:6a:d8:2f:04:ef:7e:a0:
59:7b:32:a9:ca:1d:72:34:a6:78:a0:40:a9:94:28:
08:2e:bd:ec:e9:d1:b2:74:85:be:63:41:70:b8:b7:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:60:85:F2:B8:46:26:57:BC:7B:E5:87:3C:73:91:B4:6C:D8:3D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfb0c2b8-5db2-320b-96fe-3321e9ab8b1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b6:77:87:15:b5:cf:3b:8f:a7:dc:3a:7e:2c:a4:05:19:bd:
df:32:a4:c9:4d:7f:8d:fc:e3:1a:a2:1e:b3:37:ad:12:d3:a5:
88:33:52:6f:45:8c:0f:4a:53:2c:09:98:23:83:4e:ce:e7:50:
27:7a:66:85:71:a6:d2:1b:e4:cc:a1:df:8a:4b:01:61:d6:df:
7d:68:11:1d:96:72:59:b6:f3:04:85:e1:18:78:90:7c:f0:2c:
08:58:5b:21:0f:be:40:1b:1b:ac:e8:26:aa:16:76:8e:d3:f5:
50:0f:65:f4:12:86:41:8b:05:12:10:17:ba:f0:93:d0:62:06:
3f:59:f5:e0:4f:ae:c8:74:80:0b:a0:dc:4d:67:ea:39:ea:a8:
bf:d2:42:fe:25:e4:83:d9:6c:d1:1e:8c:e6:c6:a4:b2:d0:a7:
b1:83:77:43:f1:f3:a2:61:63:52:70:91:65:aa:95:b5:98:9c:
01:02:a9:42:51:e0:31:0b:e7:14:40:fa:3e:36:39:c5:24:6e:
9a:f5:fe:25:9a:90:86:ae:a4:d6:60:ad:2e:0d:91:31:ab:42:
25:68:79:28:8c:39:64:f2:93:92:02:15:fb:03:d7:38:46:86:
c9:92:7a:a1:07:f5:95:2e:46:3a:f9:39:17:b6:a7:54:d4:10:
e1:cf:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:00 2025 by rpki-client