Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/207f3aab-90b4-3cea-b070-76d3c36be953.roa
File: 207f3aab-90b4-3cea-b070-76d3c36be953.roa (raw, json)
Hash identifier: QDbH4QO7X1zZA1QKzOiIq4kOzMA/paPyVEG+LA73knE=
Subject key identifier: F2:95:CF:27:93:62:3A:A4:6B:A9:37:7D:FE:37:97:F4:7D:CC:07:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C6FED89C48164A4893C3060
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/207f3aab-90b4-3cea-b070-76d3c36be953.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:6f:ed:89:c4:81:64:a4:89:3c:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=85d2ac8e-4917-4865-b76b-5ff87b0ae5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:fc:b8:31:d8:9b:bb:bd:e1:9f:e5:68:d3:
3e:b5:fc:b7:4d:47:20:5d:06:ed:27:84:6e:91:13:
86:09:85:9a:60:cc:95:67:ed:6d:13:24:67:2e:3f:
a9:b0:e0:ea:15:95:ee:ef:96:a6:e6:09:fb:7e:e4:
b9:12:a5:33:25:f9:94:9c:0d:c2:8a:c8:e9:ee:85:
18:ac:a6:62:e6:79:d4:62:e9:dc:03:c9:27:75:29:
08:cc:c2:b0:4f:0d:9f:8f:24:ca:9e:b3:48:dd:7e:
9a:66:d8:2b:4f:58:f4:5b:d6:20:af:ca:c4:1a:b7:
a5:f0:1e:67:2f:c1:b9:a9:75:29:7d:35:83:43:9b:
b6:67:e5:36:b9:2b:3f:b7:8b:cb:b2:0b:b2:92:a7:
9a:b4:a9:db:16:86:01:e6:d0:82:8c:42:84:cd:4d:
c2:98:cb:f6:68:3a:94:9e:4b:8d:a2:7f:a5:4a:c5:
a5:36:d5:ca:ce:d0:60:d0:06:e9:b2:36:97:c0:a2:
21:58:e6:f5:54:3c:95:87:de:c7:80:13:93:10:03:
1e:46:14:e5:1b:03:26:33:19:74:97:4a:c8:36:a7:
25:d9:0d:20:d3:e7:8e:0e:ff:d4:6a:e6:55:4d:b6:
1b:07:35:cb:ad:b6:d6:9a:30:d3:fd:aa:15:a4:dc:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:CF:27:93:62:3A:A4:6B:A9:37:7D:FE:37:97:F4:7D:CC:07:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/207f3aab-90b4-3cea-b070-76d3c36be953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:2d:55:79:d5:86:14:1a:b0:b8:44:bd:1f:6e:02:f3:62:f2:
37:0f:12:74:0a:7b:f9:a7:a6:55:6f:a5:51:3c:a8:5c:1b:d2:
85:46:8d:91:f3:65:29:3c:22:7d:8a:f0:bb:74:42:dd:0e:e2:
e7:9c:2f:8d:ec:55:c7:52:2b:94:84:f2:23:1e:76:17:17:36:
a1:a6:b0:62:ea:56:78:bf:a4:23:28:ac:ed:0e:42:48:df:c8:
43:8c:fe:a3:c4:f3:f8:ff:f6:83:67:b5:b7:54:e2:80:94:4b:
91:01:d2:d1:3e:50:c5:0f:25:30:78:e0:21:2a:1a:c8:fb:8a:
e2:e7:c4:1c:3c:1c:2a:93:2e:3f:29:d0:15:5c:e3:31:19:18:
6d:e1:92:86:41:55:4f:5d:d5:ef:4e:d8:0a:70:c9:5b:ac:ef:
ee:08:1e:d5:55:9c:fe:72:32:1f:ad:bd:89:49:ac:f3:5c:ab:
9a:6d:10:27:ba:26:08:d5:64:0c:19:11:91:4a:ca:d3:79:36:
b9:bf:c3:77:61:ac:45:74:68:91:b2:40:76:7d:b1:b1:d5:1c:
4b:99:28:0a:88:68:9a:4c:b0:af:cf:86:f1:e7:bf:cc:f3:df:
f2:fa:f3:1d:ba:1d:af:5c:25:99:fa:a5:c3:8a:25:9b:8a:c0:
43:54:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:09:14 2025 by rpki-client