Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1037f166-69c5-3c40-8f45-01e4882f16ba.roa
File: 1037f166-69c5-3c40-8f45-01e4882f16ba.roa (raw, json)
Hash identifier: ltBCSwp1O2/5SUUaoKnDmdvz+evrv+uDp+jApsfJeXE=
Subject key identifier: C2:40:D5:6E:A5:DC:7E:2B:2C:A9:E4:2D:5F:F0:BD:88:0B:54:1A:FF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF557F62EBAC3565F8B8E4100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1037f166-69c5-3c40-8f45-01e4882f16ba.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:57:f6:2e:ba:c3:56:5f:8b:8e:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=640b0717-4d13-4a30-9e8c-e5dfa7b23425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:0e:52:15:d7:3b:47:6a:75:3b:da:a0:77:
47:65:87:90:d8:fc:da:b6:72:68:0d:a7:10:6b:b9:
3f:c7:19:69:ee:3b:e7:af:1b:54:6b:5e:c8:46:c8:
e0:d4:c8:55:f1:96:47:5c:20:88:36:4f:0d:d1:77:
7e:1c:c4:02:14:ed:3b:f5:84:cb:9d:86:93:ac:85:
3c:ce:ae:bb:d2:25:90:97:c1:28:09:e4:11:9f:0c:
0e:21:3d:9e:9a:44:da:5d:82:2a:9a:a2:c5:fd:57:
c4:e1:1c:ee:1d:c1:5e:a3:3a:8c:25:47:23:30:78:
71:c7:31:8a:97:c1:b9:cf:6f:7b:0d:40:b9:2b:db:
c4:aa:97:6b:f1:a2:cb:f4:94:52:4e:fe:9f:18:9b:
80:db:68:58:4e:65:ba:53:44:a7:8b:cc:ce:9d:dc:
e7:7c:41:e1:9e:6c:a2:98:7a:29:86:88:e8:fd:52:
8d:b4:48:d4:f8:83:55:3b:96:55:4a:22:d9:10:6b:
0b:ff:8b:c0:40:49:ff:46:b5:ef:3e:49:b7:d5:4f:
8a:e8:a0:2c:07:06:a0:ff:98:ab:4a:d5:e1:23:ac:
ca:b5:71:98:3b:be:89:88:03:86:cd:a7:81:03:a4:
57:c1:50:fd:70:e8:b1:b9:be:64:da:e6:16:2a:91:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:D5:6E:A5:DC:7E:2B:2C:A9:E4:2D:5F:F0:BD:88:0B:54:1A:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1037f166-69c5-3c40-8f45-01e4882f16ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9b:08:e8:c3:0d:18:e5:97:5a:ca:d1:4c:10:35:18:52:ef:
4c:29:c7:ba:1b:77:31:89:f4:8f:ee:8b:ae:e1:72:29:93:1d:
6c:42:85:2c:a8:5f:c3:c1:d3:8c:8a:a5:ad:fb:2b:9d:31:e7:
3a:76:38:80:eb:1d:ff:fa:fa:d3:00:d9:06:7f:c7:1c:b3:2c:
8a:d6:1f:59:44:e1:9d:66:0f:b4:aa:8d:52:f9:96:28:a7:4c:
41:33:26:26:62:db:83:99:b6:34:4a:38:74:c8:95:36:cb:1b:
9f:65:8b:d0:79:df:3b:2d:5d:75:c8:2c:9e:3b:78:25:8b:55:
c0:20:13:99:64:18:03:1f:e7:04:a0:48:d5:65:77:33:0c:09:
92:f8:6f:32:88:a1:73:7b:08:9a:6b:98:61:7e:61:bf:97:b7:
29:82:b1:a4:2a:34:5a:e0:02:06:92:82:b5:cd:e6:a5:65:9a:
bb:4f:01:8f:54:7d:2c:39:1e:9f:41:e4:2d:7a:2b:a2:26:35:
ad:df:59:a6:a8:4f:ec:20:d8:a2:4d:6f:1e:93:08:98:37:90:
03:1d:f7:be:d2:a8:97:1d:09:80:58:c8:a4:81:ac:3e:ed:99:
7d:b4:c8:ab:2f:9e:23:2c:c6:16:ca:8f:55:7f:21:5e:72:dc:
f0:aa:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:11 2025 by rpki-client