Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e891d9cf-2ddc-35f3-909c-52eb9cda0089.roa
File: e891d9cf-2ddc-35f3-909c-52eb9cda0089.roa (raw, json)
Hash identifier: uTb6Zb4xc22o7q0Ktmv/7iFZ7gOqtq8t11MdiLjtZwY=
Subject key identifier: 14:D7:82:A6:50:70:90:A2:0A:0B:C8:ED:72:BF:3E:94:ED:58:C7:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE40E4ABE729BEDFA099B3200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e891d9cf-2ddc-35f3-909c-52eb9cda0089.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:0e:4a:be:72:9b:ed:fa:09:9b:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=e6251f87-62df-4dd7-8eb9-cfbf15f1f51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:6b:24:f1:b7:08:d7:11:b8:0d:8d:25:d3:
16:37:a3:d0:1c:18:db:de:0f:76:03:de:08:90:99:
66:41:83:e3:a3:9f:75:c4:1e:87:ec:18:7c:fd:d5:
02:a6:c2:05:e6:84:67:27:a4:76:79:ad:1c:e4:c2:
f6:15:77:3d:b0:48:2b:2a:c6:93:9d:4c:11:30:d2:
5b:3c:86:67:88:06:2d:38:1f:7e:57:92:9d:3a:d2:
32:1c:4d:14:d2:7f:81:9c:7c:ee:91:e8:13:4b:4d:
6c:6b:9f:39:f2:d0:ae:e1:e0:0a:9e:4b:4a:bb:97:
2e:c4:a7:bd:36:0d:95:e7:b0:ba:b7:ad:a6:b4:fe:
f8:ef:cb:6b:72:42:51:7c:52:cf:98:36:45:da:01:
a9:4d:e4:31:06:6d:86:18:28:e5:a3:6e:d4:94:6c:
b0:80:ed:1a:65:58:d4:51:79:38:a1:36:0f:d3:26:
c1:4e:55:34:e0:b1:f8:49:6a:a3:ec:75:39:81:74:
75:6d:a0:35:58:99:e6:22:cb:70:7a:89:30:a2:c0:
75:52:ef:50:dc:0f:45:e9:ae:68:12:e2:2d:87:53:
72:fe:cf:ab:c4:3b:85:ae:b0:bf:0e:15:cf:8e:6d:
2e:6c:6d:d4:0a:d8:f2:87:55:4d:3a:89:9b:e7:4c:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:82:A6:50:70:90:A2:0A:0B:C8:ED:72:BF:3E:94:ED:58:C7:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e891d9cf-2ddc-35f3-909c-52eb9cda0089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:18:1a:57:12:a0:6f:db:b4:fd:99:dc:0e:e6:e4:9e:48:75:
92:64:25:11:72:ac:2f:56:cf:db:07:67:47:e0:49:58:b6:28:
3a:ab:ee:64:3a:2b:88:f1:be:23:04:e3:5c:31:5c:1f:a4:11:
52:4f:07:80:fa:89:9a:61:10:57:a3:fb:77:31:30:d6:3e:4a:
56:27:03:31:f9:1b:4d:2e:aa:fb:5b:f4:3f:9a:de:db:7f:4b:
34:39:0d:b6:56:20:8c:17:3d:e4:30:7a:77:fb:fe:d5:dc:cb:
ad:71:9f:15:42:e2:9f:fb:ef:51:8a:ca:1f:3e:90:e2:1d:21:
5c:a3:4a:42:9a:39:97:19:06:45:ba:64:cc:36:e9:ed:49:ca:
d0:1d:d2:7f:1c:a5:d2:e0:3e:36:3a:d3:de:8d:6a:5e:3e:dd:
d3:df:48:3f:f3:75:c7:32:1f:fb:40:a1:13:2a:66:69:6a:73:
9a:b9:5f:8d:9a:e3:00:15:95:01:68:44:74:97:7b:cb:e1:70:
80:7d:70:76:9c:a9:4c:32:7a:7a:67:38:47:f0:cc:41:e4:97:
ec:0a:bd:74:24:50:9d:48:ef:5f:a7:7d:ba:19:9f:1f:cb:52:
94:bc:e1:9c:a8:2b:01:83:f8:b7:25:95:aa:a8:ae:db:1f:bb:
53:71:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:55 2025 by rpki-client