Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f11edb68-9cbe-3ba4-9283-731415d6f142.roa
File: f11edb68-9cbe-3ba4-9283-731415d6f142.roa (raw, json)
Hash identifier: nzbguqtSqWiTbbAwUx0MQGAGEYeAVwzmPUJhdcNWhs8=
Subject key identifier: 9E:E5:21:76:76:C1:2F:6B:25:54:DC:43:86:A6:73:9E:03:EB:B3:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326D7C71157F6E24631CA7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f11edb68-9cbe-3ba4-9283-731415d6f142.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:6d:7c:71:15:7f:6e:24:63:1c:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=1091e676-eb52-4d48-b69f-18892dd090db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:72:1d:42:19:1e:36:f6:e2:73:01:00:b1:
01:d1:81:97:1e:df:f5:a5:05:38:02:83:b3:a5:e4:
57:bb:7f:ee:8a:11:d9:87:5d:fd:d9:6a:2e:20:aa:
77:d3:72:43:60:83:2e:d9:64:37:c8:37:36:ff:94:
10:d3:61:4d:46:51:7b:b5:81:f7:42:a6:95:4b:90:
f6:95:48:7b:b1:a8:80:ec:90:33:ca:36:c8:7c:a8:
ad:1a:44:87:4c:dc:8e:6b:70:f4:40:37:5b:09:8c:
53:3a:dd:a5:3c:c6:27:6b:9d:80:24:57:74:52:b0:
81:2b:9a:6f:3b:31:72:75:1e:9d:93:ce:1b:c2:84:
a1:7b:a9:b6:cd:d5:e5:2a:83:b5:d0:4c:65:88:e1:
ad:94:0b:c3:b6:1f:dd:5a:04:68:35:3f:e2:7a:e4:
97:46:28:03:b2:df:98:20:53:6d:18:c9:3c:59:a3:
a3:13:77:14:71:9b:83:1e:df:f4:c1:4f:e8:15:18:
11:ca:12:ce:c8:80:69:18:ff:37:1c:b7:55:28:fb:
ae:9c:b2:79:32:ea:97:8f:37:84:24:63:85:4e:74:
61:cc:71:a4:99:cd:db:a4:88:a5:33:80:a9:88:d1:
a2:23:f5:ae:22:62:0e:9b:22:0e:a9:22:7a:b3:2b:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:21:76:76:C1:2F:6B:25:54:DC:43:86:A6:73:9E:03:EB:B3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f11edb68-9cbe-3ba4-9283-731415d6f142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ed:97:ba:d5:ed:c4:a1:4a:f0:41:63:41:0a:c1:8d:12:74:
5f:d8:8a:d2:90:a7:79:90:87:a6:0f:a7:6c:d1:dd:57:38:89:
23:d8:13:a0:58:66:53:62:38:9a:a8:86:f7:d8:a8:a3:25:c6:
2b:e6:5a:ac:dc:ba:bb:54:09:13:66:82:ff:90:b3:ba:a0:d2:
68:e7:97:e0:95:09:2c:90:9a:78:76:06:9c:47:30:05:3f:af:
ca:9f:82:b0:a9:9f:8c:ce:f0:dc:74:3b:be:06:55:c4:03:ef:
e4:22:5d:79:b7:8b:19:b9:06:a7:e7:fe:37:16:94:f4:5a:c9:
54:65:bc:33:99:e3:c8:34:92:b6:22:72:e1:72:aa:e0:9c:4c:
34:26:2f:c1:c8:af:11:90:46:78:ca:f4:05:b6:07:c3:ab:b6:
45:0e:82:28:1b:2f:67:04:0e:bd:2b:55:5e:84:f1:b4:c7:a2:
3c:c9:ff:32:28:f5:5e:e4:be:9f:52:65:2c:c2:c3:4d:4a:65:
8b:44:80:2f:92:ae:f7:b3:fb:29:6e:05:38:fb:27:84:53:3b:
11:05:5e:15:fb:a2:b7:fd:8a:40:9a:ee:7f:92:9c:60:78:75:
21:6e:f3:df:92:c5:0a:e3:45:fd:ca:09:73:b6:2a:ed:76:3b:
0e:ad:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:09 2025 by rpki-client