Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7a796b1-c505-3455-950d-264cac1cfbb7.roa
File: f7a796b1-c505-3455-950d-264cac1cfbb7.roa (raw, json)
Hash identifier: 17q1GqbnqaniTG6Ob8/r4r3/nLWn6X9+gEBa4fF2raY=
Subject key identifier: E4:3E:A7:3B:0A:28:A2:91:70:37:3E:87:68:32:18:43:36:3D:5F:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA88AB00EFD6FD3816E6C2F60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7a796b1-c505-3455-950d-264cac1cfbb7.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:8a:b0:0e:fd:6f:d3:81:6e:6c:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=9813e532-626a-4e5a-b2bd-4e06dd0b11cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:26:b1:ae:4a:85:60:9e:13:60:42:b7:d4:
3f:d8:f6:d9:54:63:b8:d4:fd:8b:13:a3:0b:c9:d4:
77:e5:a6:9c:33:08:ea:3f:67:24:7d:af:aa:83:00:
b7:59:e4:bd:93:b1:49:8d:bd:b8:fd:a0:aa:c9:d6:
dc:da:0e:93:22:b4:c8:c1:74:2d:5d:21:32:9d:b3:
26:b5:9f:e9:81:04:5d:4f:6a:47:2a:3e:d2:c6:25:
0c:97:d5:54:e4:27:72:18:09:fd:4b:55:91:47:c2:
4b:a4:50:19:73:7a:e8:f5:d5:0c:62:2a:36:86:f9:
56:c5:93:98:14:17:ef:6b:06:b7:b3:4d:96:66:40:
a2:53:0f:32:9e:62:8b:46:36:b9:d2:48:c0:08:1d:
35:25:ee:48:3a:5e:2e:ee:68:74:8b:a0:cb:d3:72:
30:5a:59:06:c9:3f:63:ed:5d:1d:f1:3f:a1:8a:cd:
c1:63:ec:c0:2d:1e:ab:ba:f0:b9:f3:69:9b:36:c2:
38:1d:03:fc:5c:07:10:41:03:5b:2b:91:de:b9:88:
f5:ff:6f:1e:43:40:16:a0:ce:66:e7:78:5c:c5:e3:
45:79:56:90:6d:cc:6b:91:0a:af:2e:a5:90:6c:5d:
57:57:f8:24:bb:f8:77:eb:fa:df:84:af:80:17:f4:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:A7:3B:0A:28:A2:91:70:37:3E:87:68:32:18:43:36:3D:5F:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7a796b1-c505-3455-950d-264cac1cfbb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:af:bd:76:bf:47:6f:eb:7f:b3:18:b5:4f:00:1c:e1:c3:fb:
6d:48:42:50:a4:e4:36:93:0e:b1:98:07:0f:b3:ac:96:d5:92:
14:42:f4:75:26:4e:ec:2d:c1:25:f8:88:21:df:e5:9d:0e:ab:
0e:f7:75:cb:78:30:4c:24:37:f0:d3:d0:10:2d:53:45:d4:5b:
e1:4f:b5:0c:74:88:9f:b1:ee:a8:32:84:e2:4c:39:3f:68:05:
a3:b3:c2:d5:5b:2d:51:8c:29:a0:e5:8e:0f:f5:5e:0c:38:0e:
a7:f6:03:8e:8f:db:c4:48:4e:c6:54:cf:bd:0c:88:8d:48:c9:
8b:91:d2:43:44:1b:00:7a:e5:0f:4d:f6:d9:92:d0:aa:33:5b:
0c:39:52:3b:ac:ce:ae:06:67:21:f4:42:f2:dd:b2:0d:87:c6:
34:d4:0d:65:30:19:f0:89:4a:55:05:b5:cf:40:07:73:cc:d7:
8a:3b:d5:84:47:28:d6:d8:66:dd:a5:2c:59:21:25:f8:0a:15:
54:c1:09:3f:db:46:aa:52:2d:8b:5f:e6:0e:bb:21:da:9f:7e:
28:58:f2:2e:df:d3:80:16:b5:a4:1b:fc:f3:da:b5:91:24:58:
01:3f:df:2f:64:1f:29:63:95:cd:ad:d3:b9:0e:4f:74:ff:5f:
f2:d9:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:04:58 2025 by rpki-client