Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202fa2c-b235-3047-9af5-7b7eb9af3423.roa
File: 1202fa2c-b235-3047-9af5-7b7eb9af3423.roa (raw, json)
Hash identifier: WmcsV2EY97urV7qtFp+nb2UuBJl819rAse+IJYnAy8o=
Subject key identifier: CD:D7:5D:C0:73:F1:01:C8:2E:6F:EF:EB:C1:97:FA:AE:81:37:49:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5AC38395F100F03DF4D4980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202fa2c-b235-3047-9af5-7b7eb9af3423.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:ac:38:39:5f:10:0f:03:df:4d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=ff003a86-96dd-4048-a29c-477c5c4b7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:74:15:21:77:37:0f:05:fc:2b:f8:c8:ec:
23:7f:51:5f:87:b4:93:2d:2d:92:91:2d:0a:8e:c7:
f0:47:a2:8f:05:51:71:10:5b:b9:4b:91:cd:a3:4b:
3f:63:9e:ee:e9:5a:1e:e0:9f:4f:68:2b:e8:65:66:
42:37:f4:15:d4:12:f8:d3:88:32:46:10:ef:9b:5c:
6b:d0:ac:a5:92:cb:60:0a:f5:89:73:ac:9e:69:04:
32:21:54:0d:14:12:5a:d4:fe:7e:ab:6b:0c:fd:21:
e0:1e:11:f4:9d:af:49:96:c3:3d:6d:50:c9:86:bf:
ab:fc:7c:8b:bc:3b:41:ef:8c:9d:16:e4:e4:2c:11:
c7:83:14:f4:2b:b3:4f:8a:17:a9:40:67:85:2f:46:
8c:51:35:7b:ac:03:26:e6:68:dd:cd:ee:87:c7:70:
a7:ca:9b:48:8f:f4:60:9b:c2:5d:a1:76:ac:f8:48:
28:b9:33:95:79:c7:62:d9:b8:e6:96:f3:10:fb:ae:
49:6b:ab:30:1c:3e:b1:36:1b:76:ca:c1:dd:6b:03:
1b:84:28:5f:a8:72:5e:87:e7:4e:64:be:37:d6:47:
f3:37:6c:d1:2f:7e:c7:ec:75:2d:c4:6b:18:ba:b7:
e9:60:33:25:78:89:3e:5f:a6:7e:d2:0c:37:83:23:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:5D:C0:73:F1:01:C8:2E:6F:EF:EB:C1:97:FA:AE:81:37:49:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1202fa2c-b235-3047-9af5-7b7eb9af3423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b5:cc:e4:83:39:38:64:7a:50:84:87:3c:a3:62:3a:6e:56:
3c:cb:61:a3:0f:fc:72:d7:e2:fc:89:7e:e8:a7:11:23:eb:ce:
e6:33:6d:a6:e6:0a:0f:79:2b:17:f3:86:e2:9c:b7:4d:f9:c3:
ce:5f:d9:2e:55:cb:e6:5f:30:3a:0d:7e:d4:94:46:5f:a8:58:
6b:2f:81:96:c2:78:ec:4f:f8:6e:8f:0e:ef:3c:a3:9b:0a:01:
05:09:16:62:a8:8f:c9:4c:70:46:15:e4:3a:16:63:23:8c:ca:
03:3c:ac:83:35:8f:e3:1b:36:96:43:22:56:ed:83:b2:fe:d7:
d1:ce:d1:d2:40:f1:61:44:41:7e:d1:43:73:08:27:61:d3:cf:
f8:f6:a8:d8:b0:c4:e8:fb:d7:dd:30:02:3c:27:14:1f:53:38:
04:0d:23:a9:10:c1:a4:d8:2e:e0:80:e9:c3:6f:c8:39:0c:1d:
69:b8:0a:ed:7e:10:a4:69:15:68:d2:41:0c:ab:71:0c:af:37:
e6:22:42:2b:a6:bb:8f:32:cd:ff:92:11:90:a6:a7:18:4c:7a:
ce:e9:cb:6b:4d:2d:cf:37:eb:6e:64:44:79:3b:f8:d8:94:7c:
7d:ec:77:e7:2b:3c:d2:4c:03:05:04:5e:c0:c2:4e:93:15:db:
ef:6d:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:14 2025 by rpki-client