Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2f627a-64c9-379b-9ee6-b31b2194d431.roa
File: 0b2f627a-64c9-379b-9ee6-b31b2194d431.roa (raw, json)
Hash identifier: 1FLYimJqwn7f/zwyYE+nFsmdYXgbebwKWVJGA41ucWg=
Subject key identifier: 92:79:BA:89:DD:BF:9E:60:BE:27:6D:A6:32:F6:3F:A6:81:57:E3:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D807AF6744C1E418AFD346190
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2f627a-64c9-379b-9ee6-b31b2194d431.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:7a:f6:74:4c:1e:41:8a:fd:34:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=3ba0abf0-c284-472b-96b1-1494fef4767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:40:7d:68:ae:ce:1d:6d:3d:b7:f9:40:45:
7b:16:06:6b:c3:19:2e:07:7d:bd:d0:51:bf:a0:45:
92:16:c3:e2:e0:3d:44:9b:a2:1e:7b:bb:10:ae:20:
6a:67:7a:34:3e:8f:53:23:28:6f:94:f8:8e:8e:81:
9b:2c:be:31:ac:07:40:83:b3:21:a7:b5:c9:be:e7:
0d:61:7b:25:e1:4c:cd:ba:68:cd:98:52:10:98:22:
56:05:ff:78:71:91:33:0b:86:ce:b1:e9:87:8a:1b:
26:1f:6c:7d:ba:06:5b:8a:2d:23:af:db:ca:a2:41:
ee:bb:91:35:fe:a7:71:8c:ce:f3:b8:80:ea:04:c6:
14:84:49:53:41:ff:10:00:3d:0c:95:6f:d4:08:8e:
75:16:a2:80:54:48:3e:6c:05:39:35:ec:a1:d6:f1:
42:96:c4:03:4a:32:c6:c9:23:d6:dd:5c:68:f3:01:
99:9b:8e:e8:30:94:2f:a4:08:22:88:c8:4a:ee:5e:
a0:cb:ee:45:ba:ce:9a:9b:25:41:92:63:6e:0d:8f:
47:b1:aa:07:75:da:85:e0:57:e9:dd:4d:55:21:b6:
1b:92:a9:c5:6d:b1:35:a0:bc:d5:d4:5a:49:c1:76:
4a:82:c4:d1:6a:57:ec:ff:0d:71:e0:af:7b:d7:0a:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:BA:89:DD:BF:9E:60:BE:27:6D:A6:32:F6:3F:A6:81:57:E3:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2f627a-64c9-379b-9ee6-b31b2194d431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:15:0e:4d:1f:f5:10:af:ae:b8:7e:b6:2f:2c:42:97:7b:ff:
93:c2:97:54:12:e7:97:af:c8:af:26:81:66:39:c0:2e:7c:a5:
dd:b4:68:28:1a:52:b3:2a:b0:f9:60:5e:ef:87:0d:cc:73:06:
04:bb:9b:f2:67:8b:05:11:44:28:be:3a:c4:33:c3:b2:64:7d:
03:74:16:4b:25:d0:12:95:96:fc:d1:ee:46:f7:20:38:3f:ec:
08:bb:52:61:7b:04:b0:cb:56:ef:70:5e:45:d4:05:b3:a1:e5:
ed:e4:c1:5f:f3:b9:f4:1f:ed:25:54:34:e8:bf:d9:53:ad:6d:
0b:54:00:eb:be:34:ef:b4:f9:97:99:a7:92:42:08:d4:22:9a:
d9:a5:81:ff:84:62:e5:2a:66:34:dc:d7:e4:8d:5d:97:16:34:
b2:4d:f2:8e:08:a2:c7:cd:c4:1a:53:2f:a7:5d:5e:ea:5a:79:
70:e0:c2:ea:c0:69:6c:13:29:e4:d4:4f:7f:14:7c:78:f5:5e:
33:76:66:de:7b:6c:43:82:b2:15:7f:35:f5:55:f9:36:98:ac:
71:10:5f:c8:7f:4f:54:f3:ab:46:e6:2b:20:e2:03:09:b1:d3:
06:46:94:4f:f5:f2:c9:ac:92:21:ac:f9:2e:45:68:12:ea:99:
8a:d3:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:26 2025 by rpki-client