Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20c22bed-bd24-3933-943e-d835ad908b55.roa
File: 20c22bed-bd24-3933-943e-d835ad908b55.roa (raw, json)
Hash identifier: kAH30SNq8hh3ekWOzfwBxyCm01PVOVlq1jnk1gE7zWE=
Subject key identifier: C5:D2:21:00:2A:C8:32:4C:25:72:84:B0:C1:7B:65:62:85:51:AB:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE58E90DBCBB9F475A22AFA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20c22bed-bd24-3933-943e-d835ad908b55.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:8e:90:db:cb:b9:f4:75:a2:2a:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=28309d11-dd6f-42a9-8a1b-c9ab306d38d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:70:a3:6a:8a:06:81:01:e0:9f:bb:88:f1:
a4:67:ab:3a:3b:4f:ce:e4:a5:9f:c7:f6:51:a6:91:
ee:e0:9e:e7:3a:51:99:97:47:e6:da:2a:39:ac:83:
03:47:fb:7f:0f:4e:73:40:1a:67:c9:af:b8:f5:1a:
7c:b1:db:29:6c:43:4b:43:dc:07:17:e9:19:88:4e:
81:aa:07:f5:a6:b4:21:9c:d1:e1:96:8c:02:3a:45:
fb:08:0d:3c:a5:1a:51:e1:38:28:9a:d3:86:77:a9:
f7:fd:0b:00:aa:b2:93:75:76:79:9d:56:29:ae:f1:
0a:d5:1b:f0:7b:ae:61:dc:82:73:86:54:82:dc:4f:
7c:1f:f8:f4:ff:2c:d6:a4:4c:15:ff:90:9a:8b:e7:
41:be:ef:a7:c9:ce:65:fb:13:bd:a8:d5:65:52:d1:
58:2f:02:1d:f8:73:7a:99:44:97:d3:17:91:40:9f:
19:81:07:cd:55:14:f7:aa:9c:bc:af:b0:76:9c:6f:
85:b4:19:af:e4:bf:f9:cf:1e:c0:07:c9:81:8b:a2:
1e:c7:5c:4f:dd:cb:3d:e0:31:78:b7:bb:59:50:e1:
d7:2a:27:28:02:ab:3c:39:72:48:d9:dd:82:b9:d2:
97:fd:16:18:d1:2a:24:a2:8a:84:3d:ad:bc:6f:81:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D2:21:00:2A:C8:32:4C:25:72:84:B0:C1:7B:65:62:85:51:AB:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20c22bed-bd24-3933-943e-d835ad908b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:15:51:aa:a7:e7:54:60:9e:be:c7:85:05:55:94:17:c1:bc:
07:62:55:f9:ec:54:df:52:3f:a8:31:25:48:e8:fc:6d:e6:b4:
82:b6:ce:a2:17:97:56:49:51:02:90:b3:83:e9:bd:1d:49:7b:
07:87:e4:c7:d6:8a:1f:bd:66:44:e4:fb:e0:34:d2:7b:d8:87:
16:d3:75:c0:4e:a2:c5:f0:fa:6c:96:b8:46:6a:f0:41:d4:8d:
b8:11:43:5e:f1:10:fb:4a:70:ca:36:90:f2:df:7c:aa:85:25:
8b:71:94:aa:96:04:e0:63:81:98:c7:17:3a:31:de:23:77:5e:
e7:91:f1:a2:26:f8:13:25:33:15:32:7d:d4:cc:71:98:81:a3:
6e:2f:dd:ed:a7:a8:a4:c9:9e:fa:7b:59:34:fe:3e:20:7d:6b:
66:e6:d3:9b:db:a0:88:9f:45:e7:19:68:7d:ca:33:b7:19:62:
41:13:ea:38:d5:49:e3:29:d4:0e:13:9b:74:34:72:12:66:24:
38:79:17:0b:38:22:cd:35:41:88:cd:ab:de:a4:5e:d1:35:d7:
a1:0b:27:f0:6e:77:d2:a6:c9:a4:26:ba:91:85:7d:ab:5a:3d:
4f:5c:24:f5:6e:e0:28:b0:0f:55:ee:4b:3a:6a:1b:bc:19:84:
b2:70:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:44 2025 by rpki-client