Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3353fb-61b8-3236-9090-1e3ac7b3c19f.roa
File: 0d3353fb-61b8-3236-9090-1e3ac7b3c19f.roa (raw, json)
Hash identifier: XFKdIWyT0uh43nKYZa9lYy5mlpJslX8ku0VAsgtC9X0=
Subject key identifier: 27:EB:D0:E5:D5:62:F8:8D:2E:2B:AF:48:19:26:E4:76:91:09:B2:0B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7081F1BC15488A0F8E074140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3353fb-61b8-3236-9090-1e3ac7b3c19f.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:81:f1:bc:15:48:8a:0f:8e:07:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=08cfe47d-80d5-4757-8be7-8045609f0979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:ea:da:fd:0b:a5:4e:e2:54:27:7b:9b:9f:
95:83:32:b8:7d:63:73:38:34:43:43:30:10:f9:b7:
37:ed:4e:da:94:cc:71:35:07:83:aa:b3:c8:e6:91:
e3:37:f9:41:87:f7:cf:17:b0:1a:3e:18:da:92:84:
3f:6f:67:ed:3b:7e:a7:e1:66:cf:10:29:c7:cc:60:
85:e3:e9:1a:84:d6:0b:7b:0e:8a:ae:b0:b8:a4:8f:
86:3f:f5:af:31:93:d7:5c:7e:e4:61:1e:cf:5f:bf:
42:91:29:d4:66:2d:6c:1e:6b:60:9b:aa:d6:3c:62:
71:89:b0:08:81:74:85:0e:5b:6d:de:c8:1b:2b:8c:
5e:98:51:d9:6f:0b:f3:2c:47:07:4e:7f:71:12:e2:
c8:1f:29:74:6b:70:d1:0a:9e:31:9c:34:53:4a:ab:
fa:b7:d6:1e:7a:70:71:6f:64:f8:85:33:b1:bc:93:
60:3c:be:1b:28:4b:87:d7:64:e0:10:96:ed:52:e8:
47:53:c1:7d:29:f2:66:84:ff:b2:50:c6:d7:91:b4:
84:c9:12:b5:70:2d:95:93:5d:a6:d6:6f:a1:8e:52:
01:1b:83:03:c4:29:52:ae:2b:c9:eb:20:77:48:91:
8d:9f:e3:89:90:61:27:e1:77:0e:50:8d:67:be:80:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:D0:E5:D5:62:F8:8D:2E:2B:AF:48:19:26:E4:76:91:09:B2:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3353fb-61b8-3236-9090-1e3ac7b3c19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:57:aa:15:9e:bf:f2:78:a1:6a:df:38:fd:1e:4f:69:b3:e4:
33:0c:e6:b8:30:08:10:d4:72:e9:aa:5f:81:2f:02:42:c9:f3:
a9:e4:5d:5e:b2:a8:0c:9d:82:02:07:2d:5a:57:20:88:44:fc:
df:08:af:6d:4f:e5:9f:9b:d6:11:89:cc:15:44:81:0b:08:a3:
5d:9a:a0:a4:26:68:b6:2a:8d:d5:48:a6:97:30:d5:f6:f7:3a:
29:1d:df:ce:db:13:a2:61:28:96:56:ff:9d:41:7e:ce:54:44:
f9:73:2f:25:5d:1c:45:e4:34:87:f5:e7:64:15:e8:7e:25:13:
dd:52:99:82:cf:4b:c3:8f:80:20:d3:6b:80:5e:ad:9c:5b:b8:
02:8c:be:71:5e:2f:33:77:17:f9:db:bb:3a:c9:30:da:24:f7:
5d:fb:f6:10:aa:d9:a9:67:d4:26:86:1a:04:69:b3:a3:11:be:
08:fe:14:94:46:21:d6:02:92:e1:b0:62:5e:93:38:6c:72:e4:
9b:76:be:ae:e8:06:5a:dc:82:9c:58:89:f1:15:f5:27:16:a6:
be:0e:ce:38:ac:73:6d:0a:08:b8:cf:ce:80:51:50:b2:5f:e4:
73:a8:3e:88:da:03:f6:ac:08:5e:2f:63:77:3e:76:1d:d7:08:
01:69:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:21:48 2025 by rpki-client