Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e10dcc5f-9ddf-3de9-bc6c-5e886d070972.roa
File: e10dcc5f-9ddf-3de9-bc6c-5e886d070972.roa (raw, json)
Hash identifier: rIMqePmUULTYMdrzfe629b5GYF3Xtd7a9I0Lu1Zf+zs=
Subject key identifier: 3F:BE:74:4E:EE:55:45:F6:EA:56:74:D6:E8:71:5B:CA:F0:5A:20:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5AF4655D6ECB0E00A51949C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e10dcc5f-9ddf-3de9-bc6c-5e886d070972.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:f4:65:5d:6e:cb:0e:00:a5:19:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=1560d65b-1736-4250-99f4-0495a0a195a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:6d:b8:cf:2a:03:c2:b4:d1:2f:f4:56:17:
0d:de:27:f4:ea:b8:27:f5:a9:e0:a9:f4:eb:a7:5a:
c2:4a:7f:4f:b0:c9:59:b6:88:b8:a7:15:77:c7:f2:
60:9f:fb:f7:25:56:df:1e:2d:a3:90:78:00:ed:f4:
81:45:e6:13:9a:40:ce:18:22:1c:08:b4:e9:f2:70:
e9:6a:42:f8:54:5e:9f:e5:5e:a2:4f:7e:ad:83:b5:
83:22:98:e8:26:65:a4:84:8d:48:34:0b:d6:46:c4:
21:95:27:40:a2:36:3f:51:5a:60:14:9d:cb:ab:aa:
42:53:c3:d8:10:e9:bd:3d:da:87:e3:3e:36:df:90:
63:30:7a:03:97:05:70:f8:bd:86:10:91:53:d6:c7:
f7:18:05:31:56:1f:ed:61:1e:95:7f:ff:2a:51:62:
6a:79:16:75:9c:6f:2c:07:fa:59:7e:aa:5f:06:e0:
b3:48:b1:d6:02:db:fb:cd:29:eb:da:eb:a4:00:65:
d0:3d:c0:e0:93:84:6a:d5:16:78:8b:c3:ee:da:23:
48:85:c4:f2:b0:61:ea:d3:65:9c:1a:71:3a:1c:f8:
95:6f:4f:76:f0:44:91:7b:99:d4:1a:d4:06:db:96:
fb:00:a6:94:00:a4:2e:18:d3:ad:ea:0e:4a:dd:64:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:74:4E:EE:55:45:F6:EA:56:74:D6:E8:71:5B:CA:F0:5A:20:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e10dcc5f-9ddf-3de9-bc6c-5e886d070972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a7:46:3c:6f:e0:9e:2e:7d:b0:bc:0c:fb:d3:30:dc:fe:1c:
c8:08:50:d7:db:b0:1b:bc:e3:a0:1b:d1:df:c4:6b:0c:ca:1d:
a3:09:bd:f2:f6:36:c2:36:d7:41:9c:1b:3b:ee:14:fc:6a:2a:
ef:c1:83:be:ee:cc:7c:9e:34:ce:bd:80:e6:2b:f3:dd:f6:31:
28:bd:36:99:99:89:75:05:27:3e:90:a5:e9:1c:91:5e:2d:12:
35:b5:f7:7b:f3:60:44:65:a9:58:ac:f3:7b:59:33:60:08:58:
33:3d:2b:cb:cd:94:88:54:58:b5:b3:8d:77:c0:01:a9:58:47:
2f:73:f9:ce:41:8b:f2:13:70:48:22:86:a5:a1:c0:66:a7:78:
48:74:c1:c2:3d:b8:2b:0d:dc:1e:94:cd:fb:8e:d0:a4:25:fa:
6d:d7:8c:ca:d4:25:6e:02:d3:a2:8f:84:eb:e8:08:21:e3:f4:
ff:bc:86:2b:54:04:93:4b:a5:83:4e:33:d7:2c:e1:82:7c:4a:
74:ee:e6:3b:08:3c:a0:f2:35:94:5b:12:ff:10:a6:a7:86:03:
0e:e0:e6:28:6d:ba:d3:62:af:47:6e:e2:82:c9:b7:52:d5:7a:
b2:10:12:fc:aa:dc:68:60:dd:8a:e5:52:ff:4c:af:ae:19:de:
ee:fb:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:47 2025 by rpki-client