Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f58d005b-b9b2-3213-8e32-8e0fd2ffd16f.roa
File: f58d005b-b9b2-3213-8e32-8e0fd2ffd16f.roa (raw, json)
Hash identifier: AO/KGs2gCmYl0kPm6hUYeIvd1ULf6JWJYJU0PDrgdU8=
Subject key identifier: F9:46:A2:8E:78:A7:10:B4:33:8B:4A:1D:C1:75:18:27:08:AF:D7:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB2ADDF7E122CC2C9BF68280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f58d005b-b9b2-3213-8e32-8e0fd2ffd16f.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:2a:dd:f7:e1:22:cc:2c:9b:f6:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=466b438f-7527-4891-8fad-092c0459b595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:42:93:69:eb:7e:c9:ba:08:a1:14:64:12:
1b:b8:bd:42:07:5d:81:47:a8:0c:ca:98:ae:64:3e:
1d:ef:c0:2a:5f:f1:3a:85:26:01:03:7d:74:fe:e0:
a0:76:02:4e:b5:7b:0b:fb:6f:ad:61:36:e9:96:e8:
97:a7:33:6a:30:18:2c:aa:0e:00:0a:a9:84:24:be:
b4:c9:87:71:99:54:ca:6a:77:e5:b7:8d:fb:e4:32:
47:0f:7d:db:a8:bb:8d:85:b8:c4:bc:5e:e9:90:37:
f1:d2:f0:c9:91:78:be:03:f0:31:2a:4a:07:69:82:
23:c5:d8:3f:32:74:ba:6a:db:6f:5d:ab:53:75:68:
39:a7:e3:25:3a:20:b3:65:f9:4b:60:91:5b:1b:21:
5f:77:47:e7:7c:7e:74:7d:d0:ea:bb:44:bc:04:50:
b7:60:53:98:c2:3b:95:0c:9b:ca:6a:f2:c2:a0:a8:
f9:a8:ed:20:05:f0:88:9c:58:1a:4b:4c:8a:4c:cb:
3c:16:ba:cb:61:e9:f4:f7:f5:c8:03:40:2c:38:9f:
b2:27:fd:93:09:3e:33:95:29:a0:0a:ce:0c:e1:21:
e2:9d:2d:b1:60:2f:24:1c:9e:87:e8:9e:76:cc:ab:
8b:e1:70:0a:aa:44:ea:bf:3e:e4:dc:ce:9e:55:6e:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:A2:8E:78:A7:10:B4:33:8B:4A:1D:C1:75:18:27:08:AF:D7:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f58d005b-b9b2-3213-8e32-8e0fd2ffd16f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:1d:b7:3a:31:1c:cf:e8:5c:45:ec:fa:85:bb:a7:0a:d6:95:
25:48:a3:af:21:6e:4a:3f:fc:c0:f3:3b:cd:63:6e:13:b6:a1:
d3:1c:07:07:32:14:3b:da:f3:93:db:bb:0c:43:2b:b2:ac:d4:
8e:3e:b7:e4:33:3e:ed:b6:6f:9d:9b:b4:cb:94:87:f0:65:e4:
d9:fd:cd:21:95:da:5b:8d:31:ba:bd:77:2b:11:4c:20:a0:6c:
c2:d8:f4:1b:91:fb:52:e8:c7:b4:e5:fb:88:ed:d6:8c:2e:ae:
1e:a4:e5:f2:e3:c4:4c:42:34:d9:10:5f:db:d9:32:ef:82:c8:
54:73:f6:bf:31:d1:cd:7d:12:16:77:ff:c0:67:84:50:02:f3:
39:3c:58:85:be:b2:10:a4:9a:2e:86:93:84:93:95:45:c9:ae:
e9:fc:56:c9:d3:62:8b:e8:cb:fc:e0:59:20:a3:ce:c7:0f:61:
b6:31:c9:cf:b1:13:f6:66:52:3c:7d:26:bf:e9:bf:c4:dc:c8:
f0:f5:01:21:0a:77:74:f7:2b:72:f2:08:32:bf:16:2b:24:ed:
40:b9:65:dc:25:71:c4:ad:26:b4:aa:f7:7e:f1:6e:26:48:a7:
b3:48:45:6f:ee:08:96:93:e9:e6:d4:ac:5c:20:cf:52:2b:f4:
23:b1:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:30 2025 by rpki-client