Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12fea1b6-96a5-3475-a1d1-bdf98b55026d.roa
File: 12fea1b6-96a5-3475-a1d1-bdf98b55026d.roa (raw, json)
Hash identifier: s4b+kRMcOjCWC3aGb1O8In/DHzeoV01yxXrEPSoagy8=
Subject key identifier: 06:70:4A:97:6B:19:8C:03:5E:13:C4:7A:4D:98:A7:03:97:A5:29:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5087B94C0F7CFC74D503BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12fea1b6-96a5-3475-a1d1-bdf98b55026d.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:08:7b:94:c0:f7:cf:c7:4d:50:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=6e2293bd-5843-48c7-b110-c392c579fb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:25:6a:68:a6:af:6a:72:46:09:69:09:41:
9f:87:25:e1:8a:d5:12:fc:03:f7:e0:cb:2f:04:42:
3b:23:a8:ff:63:49:2b:f8:83:ff:67:d4:c4:2d:38:
e6:05:48:be:a5:e0:01:22:c0:a2:3e:3f:e3:fe:1a:
53:dd:9c:a3:2e:c4:af:b9:41:46:d1:94:6e:4c:29:
b8:7e:5a:93:b0:5d:db:8f:9c:fb:2c:e6:74:e4:1b:
b8:04:4c:f6:41:c5:27:aa:84:de:24:fd:34:68:0f:
44:e9:88:7d:bf:37:9f:51:91:44:de:c5:dd:f4:0e:
af:22:85:ec:ee:03:b8:18:80:e3:d5:31:ed:6e:9c:
99:40:b9:a1:a2:da:b8:00:cf:a7:46:d7:58:ca:aa:
9a:6b:39:82:88:a9:b4:51:bf:91:32:8b:2a:c7:e1:
fb:72:16:bc:9b:ba:29:85:3c:a0:e3:21:9e:93:76:
93:81:ed:15:d8:d9:8c:4f:c6:07:d2:46:6e:19:8d:
41:78:ee:5e:b0:a0:f0:03:62:ce:8a:eb:dd:38:44:
bd:7d:41:42:47:bb:c0:fe:95:1a:c5:6e:82:55:ec:
b3:62:4d:ad:6c:d5:dc:aa:5b:81:b1:02:01:a0:d3:
1d:29:3e:5e:da:00:f8:97:ff:70:1e:7a:c2:a8:bb:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:70:4A:97:6B:19:8C:03:5E:13:C4:7A:4D:98:A7:03:97:A5:29:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12fea1b6-96a5-3475-a1d1-bdf98b55026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a8:65:d2:6f:30:35:ef:a4:8b:74:54:2a:89:e5:05:70:ae:
ab:fd:12:96:d6:d4:5c:02:9c:a5:f1:dc:24:81:53:de:01:33:
8c:ed:90:03:6e:16:4b:bb:18:70:67:ea:79:ca:8e:8b:68:78:
8b:ca:3b:4f:21:b3:9a:25:fd:52:10:56:6a:80:ae:2a:39:67:
4b:1f:ed:80:55:34:00:44:64:29:a6:b3:1f:7c:58:07:d3:c2:
3a:90:46:c2:9d:db:e1:08:ec:cb:9e:96:74:71:94:34:9c:b3:
77:0d:26:76:c6:f5:aa:c6:0e:b4:07:85:45:99:4f:09:6b:5a:
35:83:78:c0:3e:2c:c9:1f:a4:0d:ab:a3:35:cd:b1:9d:d5:5b:
0a:76:34:b2:b2:02:2f:45:af:2a:d4:a8:86:17:6d:f2:b7:df:
a9:db:d5:0d:46:46:29:94:f1:59:b5:a7:26:58:80:1e:c1:67:
e1:7c:06:57:ab:25:00:55:e4:12:18:8d:94:be:b8:35:eb:11:
21:c1:9e:bd:b1:42:cb:09:b6:a2:ae:ce:2d:5d:26:ce:0f:3b:
02:22:c0:a5:78:42:e1:a5:79:14:a0:cd:2e:ab:18:c9:0f:be:
a2:0a:0c:a9:6d:b0:2d:64:31:dc:69:26:41:8a:83:7e:f8:d3:
1e:f2:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:34:58 2025 by rpki-client