Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f769fbb9-3e15-38aa-b52f-d19f48c004ce.roa
File: f769fbb9-3e15-38aa-b52f-d19f48c004ce.roa (raw, json)
Hash identifier: bLfScFgHnii8emLGMml177JxhOJrfRVq/vHd0G912bM=
Subject key identifier: E0:50:EC:BC:17:2B:10:2A:52:F5:FD:59:B5:6B:F3:54:D2:AD:32:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F015765C24DDD55D7975200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f769fbb9-3e15-38aa-b52f-d19f48c004ce.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:01:57:65:c2:4d:dd:55:d7:97:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=253958de-57dc-4f2c-929e-7b1b4670cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:80:33:3f:09:f6:54:b7:19:3f:ac:b9:9c:
6c:b3:83:1b:f5:50:3e:57:8e:fc:3a:3b:d3:ca:fb:
2a:7d:b2:71:0b:c5:ef:41:11:9e:d3:17:2a:8a:04:
08:44:9f:bd:07:6d:d9:a8:b4:da:de:d3:7e:ca:fb:
fd:f5:be:f4:14:33:28:24:95:01:2b:02:d5:e6:d4:
b2:e7:0f:b2:8f:26:be:c5:ec:41:ae:19:fc:ad:dc:
d8:c9:4d:ee:d1:4b:b2:64:fd:b6:4a:c5:bb:1e:11:
72:e6:37:27:f4:e7:c8:c9:87:f2:c3:4a:c5:28:fc:
26:45:40:d7:91:ac:05:31:9f:43:81:07:7a:0d:67:
f3:05:fd:41:85:e3:d9:4a:d9:95:57:13:c1:0e:d1:
44:e1:5a:20:1a:1f:9b:85:ee:7e:51:4c:8e:50:dd:
f0:df:2c:02:ae:0a:5d:b8:cb:70:92:6b:9c:a7:06:
21:9b:01:58:21:81:e8:b2:83:a3:49:b2:92:7b:0b:
94:f6:a9:75:a6:68:42:f2:94:a2:a4:ac:3c:e1:1e:
ac:d0:1e:aa:10:79:b5:44:fb:f2:f2:a9:b8:41:39:
9a:7c:ab:72:0a:8c:53:0c:b4:56:50:86:a8:26:c1:
ce:08:45:3f:6f:1e:e9:eb:da:6c:13:62:bc:4a:cd:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:EC:BC:17:2B:10:2A:52:F5:FD:59:B5:6B:F3:54:D2:AD:32:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f769fbb9-3e15-38aa-b52f-d19f48c004ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:64:48:57:a3:1b:39:f4:fd:c7:b5:cf:7c:51:3f:48:3f:1e:
9e:42:66:2a:6b:a6:22:28:e8:10:57:0e:39:f3:f0:24:5b:49:
84:c9:aa:b8:d5:05:fc:8e:23:d1:c9:34:2f:0b:66:b5:db:7e:
0b:a8:38:ca:c0:4d:96:ee:95:0e:81:5c:e3:39:af:eb:4c:c0:
2d:83:0f:1f:b2:25:6e:0b:5a:15:68:0f:9e:7d:f7:ab:1b:14:
8c:3f:1f:e4:66:de:19:85:0e:36:fe:55:d4:08:b7:1f:2a:36:
27:b7:da:6d:ed:d6:03:1a:2b:45:36:31:ac:9d:26:39:6b:ad:
83:93:2f:82:a7:6f:6b:d0:c6:05:27:03:35:2f:2c:4c:26:02:
d7:c1:d9:55:58:57:ac:dd:1e:33:11:83:91:7d:f5:95:8c:04:
18:ed:f4:81:0d:ac:e9:31:76:2b:5b:e5:e6:2b:8d:cb:cf:61:
06:a1:4e:d9:33:6d:de:0a:4e:3d:e6:a6:09:c3:98:f8:3c:9a:
d1:8f:7d:2b:c8:11:6c:f2:ea:35:09:62:53:6a:35:7b:c7:44:
ff:49:e7:54:a6:89:66:16:ad:25:81:8c:23:41:16:b7:b1:fa:
2c:ca:13:e5:1a:74:60:43:7e:6b:a3:0f:15:a1:4f:77:f4:31:
d0:f4:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:43 2025 by rpki-client