Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/226030ff-3618-37a7-b8e3-365560552ee6.roa
File: 226030ff-3618-37a7-b8e3-365560552ee6.roa (raw, json)
Hash identifier: 9m3Y/aUuiv1E2Y0g+T1nS2uZ+yCePYwJO9QSYJOIUJk=
Subject key identifier: 2C:CD:B4:F7:06:9D:22:9F:BE:3D:08:90:2D:A0:91:D7:1C:30:81:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E700AE51A9E28486091AE8C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/226030ff-3618-37a7-b8e3-365560552ee6.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:0a:e5:1a:9e:28:48:60:91:ae:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=9c3eedf7-8072-4d3f-9f80-5533db18621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:7d:64:05:bc:7c:21:2c:75:e4:1e:30:b9:
8b:b4:ee:98:60:0d:d8:40:ae:93:29:ac:5d:9d:9c:
f1:11:f8:cf:42:ae:ef:dd:54:3c:74:d2:a9:48:4a:
fa:01:87:c9:f2:43:b4:1c:91:86:65:7a:99:12:da:
4b:0a:1e:e8:34:77:d0:25:39:8e:fa:f3:2d:e6:57:
07:85:c3:12:bf:dd:18:2c:94:1e:85:36:35:5c:83:
a4:4c:e9:d9:0e:54:cc:9a:38:4a:4f:0e:ba:a9:84:
52:f3:3f:49:f8:07:d2:63:31:2a:ad:7b:c3:c2:10:
cc:11:cc:f0:31:02:a8:ba:77:9b:ca:60:a6:38:e4:
28:c3:0b:7c:ba:90:46:a1:02:d7:a6:45:35:aa:e7:
d8:99:7e:38:f8:f1:34:e4:4e:1f:44:22:8c:6d:0d:
73:78:f4:f5:3a:47:09:e4:50:44:83:95:4b:96:3b:
d9:88:34:b6:5b:2b:b8:79:44:54:8c:f4:f6:04:04:
59:5e:70:f5:9d:d6:73:31:ef:aa:aa:7d:01:18:07:
5c:6e:4d:9d:6a:7c:c5:22:4f:e5:ed:ec:00:60:46:
af:1b:c7:a0:00:ca:8d:0f:68:cb:c8:0c:f3:70:f3:
41:8b:dd:ed:db:7e:4a:b9:58:a1:18:e4:74:3d:ae:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:B4:F7:06:9D:22:9F:BE:3D:08:90:2D:A0:91:D7:1C:30:81:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/226030ff-3618-37a7-b8e3-365560552ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:5f:54:50:3b:c5:4f:db:86:d7:13:b0:4b:86:ad:6d:13:05:
17:7c:a2:49:42:a1:58:c6:c8:09:a1:6c:35:ae:28:42:c5:de:
48:f5:b7:79:26:7b:3d:ce:50:36:6f:51:d4:77:94:27:e0:0c:
5f:94:0d:5e:6c:48:44:10:4a:70:18:f7:c9:6e:8c:08:ed:f8:
71:b6:0b:bc:d5:79:00:f4:ee:3a:d4:bc:d5:43:a5:ba:79:5a:
91:7e:ee:fd:99:ef:fe:16:e6:03:45:30:6d:3a:57:11:45:22:
ae:6c:20:9d:84:a0:98:ce:d2:31:6d:b8:be:ec:6f:70:cf:20:
f7:ce:e6:62:7e:56:1d:3d:ca:67:84:ab:26:d1:f4:b3:97:0e:
88:34:b5:d9:b6:ab:bc:55:90:2c:5b:f4:6a:44:63:01:f8:e8:
37:fe:ff:75:f5:d6:d4:d6:bc:51:5b:7a:2c:f3:f2:07:6a:3d:
87:d7:a1:20:7d:40:23:04:c2:99:6e:06:3b:78:ac:a9:b7:75:
aa:b0:c3:d7:c6:13:91:80:f2:db:19:a1:91:4a:79:cf:0f:2b:
c7:34:ba:c4:6c:b6:c8:75:9b:73:91:63:10:4f:3b:55:ee:c9:
87:30:c9:09:23:80:74:0b:c2:2b:aa:5d:52:c6:a9:9e:e2:11:
e7:ef:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:28 2025 by rpki-client