Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04a52cda-ef81-3eda-8763-9b6558d1c073.roa
File: 04a52cda-ef81-3eda-8763-9b6558d1c073.roa (raw, json)
Hash identifier: g90P3m2o9iMjIf8LvGytg4wracwpou2zrkIe0ibh3TA=
Subject key identifier: 0C:A8:9E:6B:D2:02:51:8C:D9:07:FB:CC:24:5A:9D:7B:AB:C2:69:9E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59A0B246F51B0D2E5BC18500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04a52cda-ef81-3eda-8763-9b6558d1c073.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:a0:b2:46:f5:1b:0d:2e:5b:c1:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=bf00c769-20e6-47a2-a6f0-1d52a60928be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:81:2e:98:40:6a:c6:05:d2:01:92:3e:fb:
10:0e:a0:b3:da:cd:db:31:b8:b3:05:88:56:d7:02:
45:82:21:37:0c:a1:ef:b3:0c:ae:c1:86:b5:1d:22:
1d:e1:99:f1:c3:2b:d0:57:93:76:2f:35:c0:c7:20:
23:7e:13:29:63:53:ea:b1:c3:4e:71:ad:66:09:c8:
b2:ef:c4:38:ab:ef:5e:5f:2b:0e:e7:98:a5:59:be:
8f:33:14:d4:a1:cf:9d:1b:ad:6c:b3:bd:d0:c2:cb:
e8:e6:c6:92:42:46:34:91:0d:9a:10:a4:35:9e:e4:
fb:0f:56:63:ab:ce:1e:46:6b:8e:0c:a1:15:58:a6:
b0:07:2c:0b:06:81:50:4f:ae:dd:2f:c7:6a:a2:91:
ae:7f:46:f0:49:34:f7:93:52:70:bf:50:cb:85:01:
19:b6:a8:28:e0:42:77:cd:0c:e6:fc:f5:12:27:f9:
21:a4:0b:c6:5a:bf:8f:82:7f:f2:e6:87:eb:57:16:
10:0d:e8:82:29:4d:a4:16:db:c9:b4:5d:34:fe:e9:
f7:88:44:0e:a9:1f:76:d7:c7:a3:3e:3d:a0:e2:4a:
5b:ce:35:7d:6b:5f:04:58:75:6b:eb:b9:e7:ed:62:
64:43:ff:e3:30:b5:30:ca:3b:d5:c1:17:37:86:d4:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:9E:6B:D2:02:51:8C:D9:07:FB:CC:24:5A:9D:7B:AB:C2:69:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04a52cda-ef81-3eda-8763-9b6558d1c073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:6c:8c:91:c1:38:38:88:44:4d:6e:03:d5:de:1c:9d:38:07:
13:4f:8c:5b:bd:57:5b:61:bc:6c:68:4b:c7:64:86:01:99:e3:
c7:2c:a0:e9:f1:1f:60:12:4f:ff:32:d3:ce:b9:96:12:d4:5f:
96:3c:74:da:e0:74:69:85:1c:d3:e9:ae:d2:f6:16:dd:56:d1:
9d:12:ba:00:dc:de:d1:69:4c:54:5c:c0:28:5e:21:ae:04:f5:
8e:14:e7:ec:b2:99:e9:f5:53:cf:69:0e:44:f7:f1:89:a7:75:
57:3c:1b:d9:67:23:46:f1:f1:2e:e5:49:e6:40:97:ea:64:04:
4f:45:47:67:d4:7b:d8:c0:d8:85:d8:8d:b2:66:f8:74:a1:b1:
2b:92:67:24:73:d4:a9:90:25:1a:3f:ca:47:38:2d:d6:35:85:
17:07:9e:0d:0e:76:73:97:60:21:64:bd:2b:fb:49:b1:60:d5:
5c:21:90:bb:cb:01:49:5f:ef:8e:f3:e8:91:2d:2a:e4:aa:7a:
02:ae:1d:1f:d1:01:85:8a:a9:2f:d9:e2:28:78:af:00:14:41:
50:ef:a5:38:39:7d:f3:26:27:78:3c:8d:c8:af:6f:da:f1:cc:
a9:82:2d:f9:36:58:e0:e0:45:8c:58:63:22:d2:99:e5:a4:38:
1b:8d:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:50:09 2025 by rpki-client