Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21a4dfd9-7b92-3c73-95d6-6d65ece215f6.roa
File: 21a4dfd9-7b92-3c73-95d6-6d65ece215f6.roa (raw, json)
Hash identifier: p8xqXbbe0zo/dE8OYuii52BJ0w5hd6vXbi4hN3FZ8C0=
Subject key identifier: 95:F3:FA:B1:E1:96:15:7B:4B:BC:E2:CD:57:CB:3E:4F:58:DB:EF:0E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F808E7FB1F365591DEE0B9700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21a4dfd9-7b92-3c73-95d6-6d65ece215f6.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:8e:7f:b1:f3:65:59:1d:ee:0b:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=13c21570-2b30-43de-b3c0-456ceacb859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:ee:20:23:a8:c3:a2:0c:8d:37:88:b3:d2:
58:e2:45:03:c7:ec:1f:96:c5:38:20:9c:d7:93:96:
de:c4:36:23:f8:88:07:e5:64:26:4d:d6:c9:b6:66:
07:85:4d:67:28:6d:ae:7b:3c:7f:5f:11:d5:5b:6a:
38:5c:41:a3:9b:35:ea:89:a7:ad:ca:87:a3:5e:bf:
30:a9:a4:81:33:44:4c:4e:89:06:6f:a7:a1:8f:d3:
5f:73:30:47:9d:29:b2:a6:8e:26:c4:57:61:79:e8:
e0:45:59:28:83:ec:b3:56:3b:bc:f2:3a:af:9f:4a:
4b:20:b3:61:e3:5c:60:2c:8c:ce:70:5e:d9:22:8e:
69:bd:23:a0:83:37:a4:c0:94:49:3a:e1:38:3d:dc:
c1:63:7d:3f:bb:ea:2e:d4:73:26:d7:03:bc:5d:ce:
9f:4e:4d:ca:ca:38:e5:47:88:7e:40:8f:5e:af:a7:
30:fb:01:f0:63:64:e6:f6:25:db:01:56:f5:f6:f9:
c4:e0:e5:27:20:35:35:a1:46:ca:f5:9f:12:80:ca:
54:44:d9:52:14:19:9d:cb:5d:bb:25:7d:7a:10:76:
d0:da:02:a1:3d:e3:3b:c7:f8:50:12:af:a4:f4:d5:
10:bb:1c:f2:be:41:05:b7:06:ea:2e:d2:0c:99:71:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:FA:B1:E1:96:15:7B:4B:BC:E2:CD:57:CB:3E:4F:58:DB:EF:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21a4dfd9-7b92-3c73-95d6-6d65ece215f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ef:8a:07:78:60:a2:0e:1b:fc:74:12:e5:66:7b:8a:9b:2b:
f9:af:65:e0:8e:98:f8:5e:af:0b:f0:00:db:30:c3:86:cb:44:
8e:73:4b:09:9d:0c:73:b1:2f:26:87:ed:c3:7f:bb:c3:ee:9f:
db:25:98:a8:f8:c2:51:6f:1c:0a:fd:49:fa:73:2b:8c:d3:7e:
4f:12:9b:fc:ca:db:3b:0d:a2:e5:85:0e:72:38:fa:cb:d8:bd:
e4:a6:5f:90:a7:0f:b0:5c:c8:51:96:bf:5d:f1:ac:81:d2:a9:
6f:7e:d9:a0:3b:08:19:de:69:87:77:4d:49:fd:0d:89:8d:e1:
7f:80:cc:06:ff:04:9a:44:f0:bb:8e:b9:fb:f0:1d:00:36:f0:
98:3b:62:e3:2d:f0:11:39:cb:be:1e:fc:ae:7a:3f:27:fc:d8:
d9:3f:93:1b:47:45:b2:df:08:56:2f:61:c6:0d:be:84:90:bf:
67:ba:e5:3a:fc:27:d3:bf:eb:75:43:ce:a1:b9:55:ce:b3:98:
ca:7e:13:a5:41:46:74:04:d1:e6:74:d4:f4:6e:4c:5f:36:e6:
3d:09:56:00:b4:47:78:77:cb:42:f4:75:c1:fd:60:85:87:6a:
15:b5:c6:14:1b:87:60:67:0d:8d:12:97:8f:aa:6d:ae:17:14:
28:3a:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:37 2025 by rpki-client