Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1bd4b33-ef15-3368-9746-3bfbfa7c2e3c.roa
File: e1bd4b33-ef15-3368-9746-3bfbfa7c2e3c.roa (raw, json)
Hash identifier: 4zI6YjLQoxWDXO/LsdjVw10lkg61KClvVGY+N0jeFv0=
Subject key identifier: 2C:6B:F0:8B:FB:0F:BD:1D:A8:5E:25:EA:A5:3C:51:F4:E0:D0:2B:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF0F391E62B31834F41F480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1bd4b33-ef15-3368-9746-3bfbfa7c2e3c.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f0:f3:91:e6:2b:31:83:4f:41:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=7976071a-684a-4255-b4e4-69b0e05e3dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:cc:10:15:47:cc:be:fa:b3:0c:0e:62:66:
ef:2a:16:78:01:4e:3a:a0:c3:a6:51:6c:33:7e:7f:
4b:75:50:0b:aa:e9:f0:c6:60:21:09:06:70:e2:3e:
e7:f9:f6:b6:2c:59:fb:54:3a:7d:ac:80:82:7a:b2:
4b:f3:1c:72:be:f0:b7:c3:df:15:08:40:13:d8:5d:
7e:05:26:bb:f5:6a:62:8c:ec:1a:c9:d8:9f:c5:55:
80:ac:c7:f2:b7:93:01:1e:f8:0d:83:b4:52:34:8e:
f5:5b:09:a5:88:88:df:a5:d6:b5:76:1d:71:33:c4:
f6:64:64:c0:5d:65:a7:82:21:1b:0f:96:9f:27:a9:
f2:fb:b8:ad:c9:f0:b4:fe:71:be:f4:78:89:75:38:
0d:23:ed:21:bc:85:4d:d5:f9:24:76:7f:ab:3a:00:
9f:42:43:97:6b:28:04:99:28:98:a5:f1:94:70:bf:
4e:5b:3c:e3:b9:cb:e5:57:43:a5:de:27:0f:a2:5f:
c1:bd:04:44:40:13:fd:54:d4:76:19:f8:a7:ac:20:
3a:26:ef:a0:ae:38:67:72:30:75:32:35:10:9b:70:
7b:d4:e3:e2:80:31:54:fe:21:52:61:84:b2:0f:cd:
c4:66:06:76:ae:af:ff:6a:be:38:77:91:f2:4d:36:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:F0:8B:FB:0F:BD:1D:A8:5E:25:EA:A5:3C:51:F4:E0:D0:2B:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1bd4b33-ef15-3368-9746-3bfbfa7c2e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:8b:02:6b:38:1c:6b:31:10:86:7c:d8:b9:af:91:16:35:dc:
a3:fe:92:12:3a:9e:9b:58:f7:45:81:4f:d1:89:71:16:a6:89:
2b:9e:19:c1:44:fa:ba:5a:ed:a5:4d:25:f0:38:f3:45:c3:07:
0d:37:78:d3:69:2f:95:64:19:96:78:a0:04:12:88:d0:ca:a2:
c7:c7:1f:50:5a:d1:6c:01:70:38:dd:92:95:78:43:30:f0:62:
64:27:70:a1:38:4f:fc:e0:32:cd:35:06:35:a9:11:14:71:b9:
df:ae:72:b2:df:f4:19:7f:a2:cd:0b:ee:98:56:99:9a:39:bc:
6a:f5:89:45:7e:cf:38:15:4a:02:03:98:0f:fc:23:6a:7f:0b:
7a:a2:69:52:ed:74:8e:4a:13:87:62:4d:df:cd:bf:b5:5a:eb:
76:2e:73:63:89:da:cb:1d:9c:fe:d4:e2:d2:c2:08:21:c2:d2:
6f:87:1f:f4:e3:88:ed:da:02:6c:dd:7e:7d:9f:b6:40:fd:c1:
2d:30:6c:98:7b:94:b7:a6:01:2a:02:d9:a3:cc:1f:30:c1:47:
2f:f7:f4:9e:8d:6f:c5:13:af:d3:fa:be:fb:ca:fd:0d:7b:ba:
ba:da:16:c8:77:0f:72:7b:97:e0:14:2f:a9:2f:f9:f0:82:ec:
91:60:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:43 2025 by rpki-client