Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7da9ea-c8a8-3044-a0b7-87c2a759c773.roa
File: 0b7da9ea-c8a8-3044-a0b7-87c2a759c773.roa (raw, json)
Hash identifier: jRPZiXGB0joVzCdBeimyXrvkeh/v9uwuHreZNztTy4Y=
Subject key identifier: D3:8A:D5:F6:17:E3:DC:EC:A6:59:C8:DD:AC:97:85:B7:E8:74:7D:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D327C08E601AF6DB531E4A558
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7da9ea-c8a8-3044-a0b7-87c2a759c773.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:7c:08:e6:01:af:6d:b5:31:e4:a5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=4bd990cb-a2a2-4d3a-a508-b12c969accfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:07:94:90:f6:6d:42:f3:8e:ca:72:db:c1:
d4:20:28:86:d9:9b:d0:78:e0:8d:7a:77:62:f0:a9:
b7:a6:a4:0a:98:eb:ad:a0:c3:c3:08:68:5d:35:00:
12:3f:f9:13:e5:35:af:2b:dc:67:96:57:89:da:de:
55:95:71:88:ae:51:06:90:89:42:86:44:65:f6:5b:
fe:70:fb:89:0a:34:62:6c:8a:84:c4:69:ec:6c:1b:
38:31:49:a1:31:ac:c4:22:01:d2:74:6a:52:68:ef:
d3:c9:ed:04:74:1a:14:97:12:84:6f:0e:c9:a4:7a:
ca:2a:4a:98:6b:b2:30:56:3f:c6:50:0d:13:f6:4a:
fb:be:a7:c3:e2:52:3a:f5:90:7e:37:3d:6d:ec:88:
53:d4:8c:f4:2f:0b:8e:ec:67:0d:8c:16:8a:4d:b7:
e6:b1:48:82:c1:2a:88:76:42:13:b6:99:b3:7e:a3:
16:93:56:79:e4:9d:bb:fa:79:10:d5:7d:27:c3:d9:
44:9d:26:13:d1:d0:a5:a2:0e:40:63:21:1b:86:a6:
5e:95:98:da:0d:80:4d:a7:35:b1:64:78:31:78:ef:
e8:67:d9:fe:08:d1:7b:39:79:e2:44:7c:86:d6:2e:
ff:92:d8:f7:52:8f:7c:c0:64:11:0e:ec:61:95:dd:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:D5:F6:17:E3:DC:EC:A6:59:C8:DD:AC:97:85:B7:E8:74:7D:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b7da9ea-c8a8-3044-a0b7-87c2a759c773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:88:73:2a:b1:01:7b:87:7b:b1:5c:75:63:18:ff:5a:31:64:
e3:f9:cd:6d:8d:b1:18:3b:6c:90:7f:fe:82:8a:ed:6f:2e:73:
15:22:90:57:e6:30:71:4d:0c:14:85:31:e4:47:cf:bf:c6:ab:
91:36:ac:00:d1:27:f7:99:ce:6f:eb:cd:fe:ca:d6:14:1f:2b:
7a:2c:22:57:db:90:e8:96:c5:a7:f4:88:4a:37:74:8f:c6:b5:
49:11:7d:a9:42:18:1d:d1:d4:69:87:fd:b8:55:e6:be:7b:d1:
1c:ce:88:c2:eb:c7:62:5f:7a:96:ab:9c:a1:1b:29:f2:78:80:
3e:28:bd:b1:19:23:a0:5b:bf:ba:0d:a4:67:16:d8:6d:56:ef:
b8:72:27:4e:90:09:37:21:5f:51:19:b1:35:7f:97:d5:c6:f1:
3a:f9:0e:1b:26:9c:64:c8:7d:c6:72:c6:b7:56:c0:2a:67:d1:
4c:6d:d6:ed:92:34:2c:1b:d5:78:13:e8:ee:cd:83:a3:a4:4c:
e7:88:31:55:5b:b0:f6:7d:4f:1c:58:1b:79:a7:52:19:b4:4a:
1b:2b:c8:a3:10:2f:98:a7:d9:00:5b:6f:fd:b8:58:23:5d:d8:
96:0e:2f:eb:68:6e:e9:66:ec:6b:40:be:29:b5:e2:9e:53:ca:
dd:3c:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:42 2025 by rpki-client