Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e1420c3-6b3c-32af-98ca-de11d5400d30.roa
File: 1e1420c3-6b3c-32af-98ca-de11d5400d30.roa (raw, json)
Hash identifier: yyncUCvvq1RlyzF+RHNXRyx1Z2vAmvdiXQmT6gIzX2I=
Subject key identifier: 43:57:43:E7:4F:53:8B:DE:0A:58:81:74:9F:54:08:DC:4D:A9:7A:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C4AECA9A18C5CD109981BE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e1420c3-6b3c-32af-98ca-de11d5400d30.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:4a:ec:a9:a1:8c:5c:d1:09:98:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=df6da4c9-039b-48e2-88c6-50f809733520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:8b:aa:4f:50:fc:6b:6d:24:c8:9f:7a:ff:
fa:0f:7f:ec:c5:44:3d:7c:17:ec:97:a8:78:d0:51:
33:01:f3:c1:da:2b:a1:48:5a:5f:ad:cb:53:a6:89:
75:73:4c:15:51:5f:ae:97:14:81:15:08:c8:c0:42:
e3:cb:4d:7f:92:58:99:d1:74:89:d2:3e:b2:e1:84:
4c:61:4e:e1:46:e6:26:26:7f:56:e4:10:a2:c0:2c:
f7:34:e5:73:37:c8:c3:18:80:4d:3f:6e:56:9d:81:
52:96:e3:18:62:3c:2c:6e:cf:51:48:74:fe:8f:13:
ed:c2:68:57:45:c3:0e:cb:26:c3:84:53:4e:f1:52:
a6:72:0c:23:d3:34:a4:47:10:ce:6e:49:43:cd:b5:
89:ea:30:90:ad:41:f1:70:53:fa:d2:b0:33:d4:c3:
95:88:4c:79:b0:43:4c:62:b3:ba:4f:82:49:2f:76:
a4:ab:9d:bc:6d:0a:13:26:b7:a1:fb:e1:44:5d:4c:
14:b5:6c:8c:3b:a2:da:64:28:f2:b7:f2:72:14:78:
18:8c:21:7c:45:37:47:1d:44:c7:b0:ad:e6:4f:a3:
b2:43:21:69:ef:8b:74:d2:4f:13:88:40:24:5a:86:
d0:2d:a2:fe:5c:2c:d4:03:f7:84:04:9f:b6:98:76:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:43:E7:4F:53:8B:DE:0A:58:81:74:9F:54:08:DC:4D:A9:7A:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e1420c3-6b3c-32af-98ca-de11d5400d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:92:90:c4:44:af:2a:29:b6:d2:40:a1:e8:3b:dc:69:82:f8:
f2:f2:10:e0:fa:0a:a0:dc:62:30:63:14:10:98:d4:dd:fd:76:
43:f0:e2:f8:c7:66:d5:be:b3:20:24:b4:97:ad:36:94:26:e9:
99:fe:78:aa:3d:0f:f0:d3:57:f5:20:4e:b9:5b:9c:56:d3:6a:
e9:b0:ca:72:ac:d5:66:d2:38:4c:26:a3:32:79:9c:9e:65:9b:
94:a0:5b:11:6e:cc:a0:19:af:13:82:11:98:22:ea:7c:14:52:
5d:c2:40:93:02:f8:cb:b0:53:2f:03:04:7c:b3:3c:4d:b3:29:
97:96:6a:b7:2e:2c:3c:79:81:2a:d8:fb:7a:d5:4d:6f:82:b4:
5f:bb:78:cf:78:28:5f:47:13:29:99:23:94:47:4b:fb:18:9b:
50:c0:25:56:bf:af:4e:12:59:09:21:33:81:c7:48:7f:2e:47:
a6:4f:4e:e5:5c:12:08:bc:79:d8:4a:ee:5c:f6:c9:f2:b8:e0:
4e:0b:2d:90:60:9e:96:54:19:57:82:df:29:47:c0:2b:10:18:
a4:f2:69:90:19:6a:08:ea:5e:2a:39:92:54:4c:d5:95:a4:c3:
bc:0b:c5:1b:ce:53:6a:fa:2d:be:1d:55:98:09:41:a1:3f:86:
52:10:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:51 2025 by rpki-client