Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f94f7e3-aaf7-32e8-babe-7e0f76874cbc.roa
File: 1f94f7e3-aaf7-32e8-babe-7e0f76874cbc.roa (raw, json)
Hash identifier: Kknfmg3ozdfGex8oa6b1Z+SA1WJmWqDqyLcSpAbbV20=
Subject key identifier: E1:31:09:0A:E0:BE:8D:80:5B:71:3B:FF:18:CE:68:5C:1E:77:6A:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAAC3F98E047AAC49DEED180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f94f7e3-aaf7-32e8-babe-7e0f76874cbc.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:ac:3f:98:e0:47:aa:c4:9d:ee:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=8d526fa8-1b66-46e9-b508-cc4a0d652af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:83:4c:d5:db:7d:52:29:c6:a9:42:18:0f:
57:b6:33:03:a8:e6:4d:5f:11:6c:d6:ad:90:6c:ca:
80:80:a9:56:11:5a:69:55:59:50:18:cc:33:01:4b:
e1:0c:d1:09:21:a1:3f:bd:a0:e2:46:54:15:5c:a5:
64:86:30:17:22:0e:2e:2f:61:e2:22:bc:6d:3f:3e:
a9:5b:48:31:e3:26:c6:f7:c1:54:f7:8f:f3:41:e9:
8d:e7:e1:3f:12:d8:14:56:f4:4f:73:d5:38:a8:89:
6f:df:2e:f5:c1:e0:49:ca:94:ba:d4:69:f8:79:95:
fe:46:58:94:e4:35:34:db:bc:1f:5f:2e:db:73:81:
ab:64:2d:a3:03:65:16:83:79:78:e1:36:f4:30:f4:
00:95:3e:aa:0b:2c:e6:8b:a7:cd:b3:da:e1:46:b4:
7b:ec:02:19:23:64:cd:5d:a9:b4:3a:17:66:63:f5:
6d:d9:47:4a:c1:14:22:37:a6:88:f0:77:29:26:30:
80:f7:24:45:ed:12:e3:78:b4:5f:76:b8:93:5d:df:
53:83:da:97:fe:22:32:9c:8d:72:49:b2:e3:a3:2b:
bb:ed:c0:4b:33:f2:f8:fb:25:96:cb:3e:bf:da:0d:
60:1d:7e:ee:28:2e:73:a3:56:2f:da:aa:d5:46:09:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:09:0A:E0:BE:8D:80:5B:71:3B:FF:18:CE:68:5C:1E:77:6A:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f94f7e3-aaf7-32e8-babe-7e0f76874cbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f6:81:5f:fa:0f:4b:7f:b1:ed:e6:48:dd:9b:c5:9b:85:b6:
2e:28:1d:e3:55:41:ca:93:b8:57:23:fe:6b:f9:1b:c3:cc:8b:
12:ac:05:1e:bf:33:4a:2f:fd:f9:f5:fb:a3:dd:23:49:64:23:
0a:0a:35:88:89:53:c8:a7:1a:0b:95:4f:7a:5c:d6:4a:d5:65:
7c:ec:27:41:69:16:94:5d:92:74:3a:7d:40:1c:1f:7b:a4:1b:
84:69:b1:14:ab:c4:db:a9:56:56:bc:71:e1:5d:a8:7b:e3:0e:
42:ed:f9:f4:6a:a5:9c:71:78:d0:3b:0f:ce:71:6b:ef:59:04:
cb:06:20:01:82:90:21:a6:a3:a7:fd:70:8d:e0:ef:f5:dc:ab:
39:9e:7f:38:92:2a:cb:0d:ce:0d:6c:9a:5d:bc:1e:96:b9:ce:
fa:96:61:62:b0:c7:6c:6a:de:5f:ac:4f:f3:58:92:0f:b3:b8:
6b:02:cb:02:eb:dc:a9:8f:de:85:fd:b1:b0:73:e9:66:88:ce:
62:0d:f0:d8:a7:44:e8:a4:84:e0:f0:63:79:fe:69:43:7e:c8:
fb:4c:51:43:96:6c:eb:97:92:5a:f1:91:10:b9:03:fd:39:15:
a5:57:a5:99:45:3c:87:ef:fb:12:73:5b:1f:03:25:a3:93:ed:
e6:6e:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:08 2025 by rpki-client