Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa78c5d-158e-38ea-810b-49bfab051eb1.roa
File: ffa78c5d-158e-38ea-810b-49bfab051eb1.roa (raw, json)
Hash identifier: p7DuQ74thaSEoFpT9zNfjW+C3xFgu2M/BvfSa1LGd1o=
Subject key identifier: C4:FF:04:18:65:CE:87:02:83:FF:AB:1A:4C:A2:25:DE:EE:4B:60:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1CFCF634F4674FF2B99C39C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa78c5d-158e-38ea-810b-49bfab051eb1.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:fc:f6:34:f4:67:4f:f2:b9:9c:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=f90039c6-2fdd-417a-9704-b74fa5b0a9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:83:90:52:da:3b:9b:24:45:8a:5c:56:65:
24:17:a6:ea:b6:bb:ec:a7:00:26:07:6b:1e:38:15:
5e:51:65:96:8d:90:de:6d:18:8c:4d:c7:d1:bd:cd:
ff:82:d0:38:68:5d:8c:4d:32:c1:a2:76:05:4e:97:
68:07:c5:0a:ea:99:94:58:0a:6d:31:5f:fd:41:12:
15:9e:9a:e5:9d:f4:7f:d8:1f:fc:55:d9:d8:a1:a9:
53:b4:c0:84:39:a2:43:9d:2f:4d:17:e9:25:7f:b4:
7a:01:e4:a2:aa:ff:57:5d:4d:1c:79:14:42:43:49:
17:9b:2e:4b:12:46:2a:74:34:6a:df:7a:d9:fa:7e:
89:f1:ff:a0:b6:84:43:01:46:f8:6c:6a:bf:09:4b:
10:56:34:f7:82:01:47:b7:57:fb:0f:06:a2:dd:c5:
23:ff:ff:b2:8e:8b:48:ff:c6:01:c2:8a:7e:57:ef:
6f:16:b1:f0:14:39:99:d0:66:e6:3c:63:07:9f:6e:
8a:7b:96:84:e9:19:0e:49:2e:1a:01:3a:18:30:d6:
4d:cd:3e:55:35:0e:f6:12:dd:ee:79:a4:1d:74:cf:
92:c0:f1:ca:4b:fa:22:6f:fc:d6:a7:5e:6b:18:39:
e8:45:9a:df:27:62:8a:f1:b1:57:6a:73:11:de:36:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:04:18:65:CE:87:02:83:FF:AB:1A:4C:A2:25:DE:EE:4B:60:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa78c5d-158e-38ea-810b-49bfab051eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:81:5a:ce:96:f9:ae:f7:36:ff:e8:23:d1:6f:af:cf:08:20:
01:39:43:1d:46:c4:1f:45:b6:ed:46:b4:56:0a:13:fa:ce:a2:
38:42:d8:57:b5:34:3e:a4:e1:b8:7e:4d:d8:d0:c1:cf:9b:40:
94:bb:3f:8f:68:12:9d:44:9e:6a:9b:ad:c1:27:d6:22:0a:ec:
6c:15:56:8a:22:1e:34:6f:71:16:0b:9a:97:0d:cd:e7:da:93:
24:51:d8:a4:80:84:85:d8:87:fc:b0:e0:73:2d:7d:c5:20:9c:
ce:7d:94:57:be:ed:53:64:63:cf:df:93:4e:54:e1:53:56:b9:
23:1f:bf:d2:37:9f:22:be:2e:ff:c8:3d:d1:fd:9d:de:d1:8e:
e2:8e:52:f1:5e:95:5c:4e:a5:ec:ba:89:44:76:c5:ec:1c:ba:
c0:f4:37:55:0b:22:40:2b:35:64:97:8a:83:88:0e:29:63:de:
98:64:ce:a1:9a:07:1a:8e:43:d6:7c:7f:59:49:1d:3a:a8:df:
da:8b:24:ac:68:4f:5a:69:a3:a5:db:4e:03:6e:bb:c8:cc:b1:
7e:24:12:17:ca:a9:30:9c:7e:b4:17:b3:64:63:eb:60:45:76:
68:46:b1:c7:91:c7:18:be:fd:07:0b:88:10:94:9c:51:06:88:
2d:4f:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:24 2025 by rpki-client