Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/196eca62-3d8d-3a68-b49b-b053f3a8f08d.roa
File: 196eca62-3d8d-3a68-b49b-b053f3a8f08d.roa (raw, json)
Hash identifier: wHooKF8oVOg3UTlliQpqJxPGo5ZNRepUibVT9OO8q1U=
Subject key identifier: 55:01:0D:A8:06:94:5F:CA:99:0F:F2:C2:7F:07:09:DC:AB:A7:A5:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5EF76D3840392FECD727900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/196eca62-3d8d-3a68-b49b-b053f3a8f08d.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:ef:76:d3:84:03:92:fe:cd:72:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=443cfa3f-90e0-438a-9a11-16dc12239f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:85:45:99:18:61:ee:a3:0d:53:ed:79:6b:
8b:12:53:2a:e6:0d:2d:c1:7e:bf:a2:62:dc:f9:07:
c5:76:f1:c7:e6:78:e4:9a:09:8d:b7:f7:2e:b0:30:
85:8d:35:aa:32:11:19:e0:d3:ce:2e:5e:83:5a:7f:
94:66:e6:de:b4:37:c6:77:9c:69:0a:39:e8:bc:ca:
12:08:38:64:ca:f5:c5:12:4e:d4:32:c7:fc:0d:7b:
81:51:fd:49:a4:c0:7f:b0:89:73:43:21:29:70:b2:
67:31:e0:4f:2b:d6:10:68:e3:02:68:78:ba:df:d9:
b3:ad:dc:8d:4d:c2:19:15:6b:47:54:61:d9:c1:d3:
3f:cd:71:c2:7f:85:28:7f:f3:0c:15:70:cb:1f:c7:
ae:0c:07:a1:aa:4a:0f:39:59:cd:e2:13:5e:c9:6c:
20:5c:c1:8d:d3:4e:5d:2f:16:7e:46:28:48:4b:fb:
1b:12:9f:3f:57:11:53:14:fa:09:fe:3d:a3:52:89:
3e:d6:b7:82:e7:47:16:8f:fc:2c:52:85:31:7b:06:
07:dc:0d:e1:de:45:0f:53:78:44:85:d7:2f:52:05:
db:15:95:58:dc:5e:64:93:91:29:f6:f0:02:17:fe:
84:37:91:27:20:a9:36:15:63:db:62:1e:78:18:ba:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:0D:A8:06:94:5F:CA:99:0F:F2:C2:7F:07:09:DC:AB:A7:A5:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/196eca62-3d8d-3a68-b49b-b053f3a8f08d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:9d:d4:24:74:3c:d8:37:b2:b1:66:dd:f9:a3:28:4d:b8:c3:
23:ee:20:b8:ee:37:88:81:da:a7:a4:e4:5e:21:b4:38:fc:15:
bb:f0:40:e5:8d:f4:9c:63:53:92:e7:39:c3:8c:68:86:65:28:
2c:67:42:99:ea:0b:65:b9:63:fc:2b:bc:01:50:e0:09:d4:9a:
9e:9d:c8:69:33:88:d0:f4:47:d2:bf:19:b0:7f:81:f5:66:7e:
bd:b2:9d:84:95:bf:90:66:e9:c8:6b:bd:d1:d1:d3:a5:40:0a:
cf:49:b0:b6:c6:05:11:62:2e:f7:81:e4:32:04:44:6c:87:05:
5b:46:23:47:88:b6:c3:07:ed:03:db:7a:25:36:d3:82:12:a6:
40:af:f6:9b:4e:2d:d8:6f:56:c7:d0:bf:8a:50:bd:7b:6e:ce:
fa:2f:e1:7f:31:b4:d9:10:76:72:35:f2:59:08:82:a7:88:0f:
51:a0:0e:9d:91:d0:d4:cd:7f:4a:fd:99:20:70:0a:a0:4a:8d:
d5:8f:14:87:35:50:aa:b9:d0:a1:cb:06:79:e3:a1:bf:87:c1:
00:c8:f9:82:07:04:53:13:ee:51:aa:8d:8b:ab:2e:0b:db:81:
7b:1e:cc:04:48:d1:5b:2c:0b:14:6d:5c:10:86:81:e8:69:18:
87:c2:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:26 2025 by rpki-client