Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb74e884-8b3d-39fc-a80d-0def6312ee96.roa
File: fb74e884-8b3d-39fc-a80d-0def6312ee96.roa (raw, json)
Hash identifier: dwBOuINqbSYjLU0eNRQkDv9NzcAOyiAOzGDH7q7alhU=
Subject key identifier: 43:1E:B8:9A:0B:ED:9D:FA:ED:2C:8E:18:0E:1F:B5:B3:19:B1:C6:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4340A0855CB53FC61C49800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb74e884-8b3d-39fc-a80d-0def6312ee96.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:34:0a:08:55:cb:53:fc:61:c4:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=c274dfac-7108-41ee-aa6f-3ade9e31519a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:d2:86:27:ac:43:56:51:19:b4:b9:35:85:
fb:34:81:59:2a:17:73:b4:94:4c:2a:8a:35:c2:2f:
9b:55:4f:0e:0f:35:40:21:6a:53:60:29:21:bd:dc:
43:aa:a9:1a:26:d3:f4:7e:10:0f:73:1b:9f:1f:bf:
0d:53:9a:55:f5:6d:e0:5a:a4:36:da:04:87:d1:0e:
ec:f0:b0:24:c4:8d:69:11:a1:93:8a:06:18:ba:ed:
cf:b2:63:da:1a:94:20:09:52:92:94:a4:47:da:43:
ed:dd:b1:32:44:f5:c5:c3:94:16:7e:ac:2f:8d:37:
6d:44:5e:20:b8:b9:9e:9c:53:cf:23:b9:1e:8a:1a:
ae:92:53:ef:5b:1e:24:af:40:dc:f0:4f:e7:c9:3d:
5d:58:02:00:04:c1:b9:c4:de:6d:88:29:e3:4e:39:
46:20:90:b8:b3:07:49:53:94:25:b6:43:62:db:e4:
ca:76:b1:08:44:64:e0:d1:f9:f0:21:d8:32:f6:94:
16:61:97:3a:2d:ad:29:c0:d4:b5:39:50:c9:0d:b8:
3b:7f:33:76:44:f9:8a:8c:35:67:2f:05:86:8b:85:
f4:94:d4:1c:4a:4f:22:e4:60:68:64:d9:20:af:cd:
ae:ee:34:d9:ff:f3:90:9f:c6:ce:a5:f2:b8:0b:6f:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:B8:9A:0B:ED:9D:FA:ED:2C:8E:18:0E:1F:B5:B3:19:B1:C6:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb74e884-8b3d-39fc-a80d-0def6312ee96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:2c:a3:51:70:c8:73:17:4b:6e:7a:33:09:f1:16:b9:44:71:
ea:6a:b0:8e:8f:a1:3e:9e:5a:a0:26:b4:20:3d:05:3c:fb:dd:
5d:ec:2d:34:78:0a:42:2f:fa:af:2e:9e:c9:30:0a:95:16:b6:
29:cc:2f:92:a4:93:bc:63:19:05:e9:6e:66:03:f9:54:8d:91:
ed:c7:09:ce:74:bf:8d:61:19:de:2d:de:58:16:00:73:05:cc:
8a:1b:53:a5:bf:5c:64:0a:30:c1:2a:d8:e8:81:d3:0f:52:8e:
c0:b7:fa:b3:1b:7d:f9:07:53:86:f8:c4:5f:e5:5d:da:dc:98:
1f:11:9c:0f:fc:61:e3:e5:30:33:fe:ed:b6:6b:d3:51:9f:d9:
93:9a:ed:a0:15:c2:13:24:8c:de:68:f9:69:65:b6:33:70:07:
9e:e5:bd:51:53:d4:cc:8f:00:ed:88:07:1d:e1:8b:0c:a2:ad:
95:31:a2:10:db:85:31:ee:11:2c:a5:94:d2:e4:1b:1a:e3:b7:
f8:a5:ac:ab:9f:63:ba:c5:28:15:bf:54:59:77:de:04:58:76:
fa:73:35:7a:ad:70:7c:fb:9f:54:30:54:92:a7:bc:f8:17:8c:
ea:c8:32:03:a6:fd:14:2f:73:54:60:32:b8:b5:e2:75:6e:5a:
f3:97:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:19 2025 by rpki-client