Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e292b538-b8cb-39fb-9faa-db9f450c90eb.roa
File: e292b538-b8cb-39fb-9faa-db9f450c90eb.roa (raw, json)
Hash identifier: nju+PJAYcVwOQy6i79n7rwEVI9FpUF78cEfwRGQ5cH0=
Subject key identifier: 49:D2:CA:58:BC:BB:A0:3E:10:64:5E:1C:C9:FE:6A:42:7C:2D:5E:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD44231177C8A8FF315D8AD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e292b538-b8cb-39fb-9faa-db9f450c90eb.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:42:31:17:7c:8a:8f:f3:15:d8:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=dd242e49-835e-4fd4-8082-907818e2377d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:80:90:0e:f2:b5:ac:6c:cb:f0:38:a9:58:
db:ac:03:cd:29:a2:83:53:12:5a:f1:c4:07:0c:66:
8d:5d:2b:80:f7:d1:2a:57:28:4b:e6:00:f7:a8:66:
b1:32:3d:06:c7:cb:11:c7:30:61:d0:1a:8b:e8:b3:
3a:af:4e:5e:fd:49:a9:6a:32:14:69:b9:00:d7:47:
84:1b:43:14:ac:62:e0:a7:fc:ae:15:5d:7b:7b:99:
09:ab:55:07:86:91:50:d9:24:4d:b0:5c:f8:b5:86:
bc:c1:58:49:39:db:44:3b:15:d2:4d:a5:2b:7c:a5:
d5:c2:22:f7:c4:bd:c8:fc:3e:93:05:96:99:7d:0c:
d1:9d:0c:b7:88:ce:92:1c:eb:15:d3:58:77:1a:ad:
a3:38:ce:eb:e2:9a:36:5d:cd:4d:c1:64:8b:34:84:
c3:d7:1a:bc:4f:1f:a0:0c:71:2f:1f:70:52:3f:bf:
3b:ed:57:05:21:6d:90:14:9c:66:63:87:29:dd:29:
1e:6b:dd:d5:fe:b8:94:a4:2a:93:ca:aa:70:45:9d:
d8:e3:79:0a:13:fe:e4:7b:74:57:6f:42:84:49:5a:
91:e4:74:86:94:7c:97:17:00:e0:32:6e:c4:c3:c5:
d1:49:0f:f8:10:b0:dd:ac:e5:09:cb:4d:bb:0a:7c:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:CA:58:BC:BB:A0:3E:10:64:5E:1C:C9:FE:6A:42:7C:2D:5E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e292b538-b8cb-39fb-9faa-db9f450c90eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:49:c1:28:12:4f:d1:f3:fb:f9:6d:45:03:a5:4e:50:85:7c:
64:ec:d9:fe:95:75:53:18:2e:41:c4:98:cc:9d:d5:0c:f3:9b:
21:68:91:ab:39:39:3b:f8:b0:0d:fb:db:04:f9:24:ae:5f:61:
a4:d8:23:4f:a6:48:da:5b:d1:6c:c7:6f:84:3d:86:13:10:0a:
d0:9d:3e:0d:49:d2:65:e5:25:55:d0:c2:f4:e7:bc:28:ca:7e:
af:97:51:a2:6c:08:07:e9:d1:36:76:18:37:56:cc:56:ab:98:
17:4c:10:8c:37:31:ff:bc:b0:17:e9:fc:f5:df:dd:f4:8e:a9:
3d:79:ee:7c:b4:40:03:e8:24:59:d9:66:f7:29:29:e6:ef:b3:
ad:0c:b7:94:df:76:60:12:14:f2:b3:13:61:b7:de:14:dc:61:
40:28:50:1f:e8:c0:91:a7:51:50:1f:9f:24:0a:65:cb:a8:7e:
c6:6c:b3:ac:73:dc:10:de:be:0b:13:a1:05:f5:06:bc:8d:0a:
e9:54:08:49:7e:47:ee:6d:30:3b:b2:52:ef:2e:dc:3d:ad:af:
eb:95:44:93:74:0d:49:24:7a:d8:0e:59:3e:be:cc:a5:da:1d:
fe:9d:1f:a0:c0:4f:a2:bd:9b:d2:d4:a9:91:5b:10:93:29:bf:
2d:f9:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:39 2025 by rpki-client