Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2646fafa-1f85-3b12-9307-94a4f05968ab.roa
File: 2646fafa-1f85-3b12-9307-94a4f05968ab.roa (raw, json)
Hash identifier: wAMLGCl5bkwjtGOoSTUqDybOPHUX+sRR25U5lOifHdE=
Subject key identifier: 03:01:6B:AE:E0:B7:76:DD:62:3E:AD:43:46:DF:95:77:F3:53:6F:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD406ADB83E58BC59F5A0E880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2646fafa-1f85-3b12-9307-94a4f05968ab.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:06:ad:b8:3e:58:bc:59:f5:a0:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=a4b40fd3-5113-4aa9-a979-a0e495ee9bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:ce:f6:7c:eb:9d:cc:1d:08:26:6f:e0:bb:
0b:ae:47:49:89:15:07:d5:dc:c3:82:2d:00:97:ca:
2f:86:a8:42:29:38:38:39:23:d1:bb:c6:78:4b:ef:
34:a2:d2:d6:51:a2:09:9b:1e:cb:07:00:ed:a8:cb:
8a:d3:9f:64:58:b5:a2:68:39:de:10:af:ba:dd:51:
2b:b4:ee:d3:c7:fb:05:51:73:7c:06:6e:c1:a3:40:
e6:3f:6e:92:e1:ec:61:07:35:66:15:38:25:2b:08:
25:e0:5f:c0:af:0f:3f:2e:8f:18:cc:8a:b2:0f:7d:
9e:ab:5a:80:5f:cc:db:f6:62:02:41:f0:66:10:7a:
08:84:35:1d:c6:3b:70:31:38:d9:70:bc:5c:d6:32:
20:9b:b4:90:fb:7d:c6:45:fb:17:e6:23:b8:9d:1c:
40:50:b7:7f:80:1d:0b:97:28:fa:62:9f:85:9b:f5:
33:de:7f:36:76:b9:11:76:4f:db:24:99:db:73:80:
fd:62:8e:f9:ce:3e:bc:b5:28:92:65:44:a4:a3:33:
e3:de:27:44:00:c7:6e:57:76:05:46:70:07:f8:a5:
4a:8b:62:79:37:f9:27:f4:9c:c2:02:f2:e0:11:d9:
3c:c8:71:48:a8:2c:be:dd:1a:75:25:e0:fa:e2:6f:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:6B:AE:E0:B7:76:DD:62:3E:AD:43:46:DF:95:77:F3:53:6F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2646fafa-1f85-3b12-9307-94a4f05968ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ae:f1:c5:85:2b:a8:f8:89:0e:20:f6:36:1c:23:9a:ee:9f:
b8:5d:bc:0c:69:2a:db:b5:d5:60:ce:a6:27:3d:32:77:c5:77:
18:d3:07:5e:3c:41:d3:c2:21:67:52:cf:8d:a5:c2:07:a8:45:
64:77:12:b7:17:02:3d:47:9d:12:18:e8:d7:c1:e5:bb:45:ef:
0f:11:f1:de:91:be:42:33:34:28:39:6d:5d:e1:5c:57:04:05:
09:09:1f:18:68:83:d0:6b:9d:6d:4b:cb:75:36:a4:f9:c2:01:
44:f8:4f:97:bd:a4:f4:12:20:7f:be:48:2b:82:4f:0d:36:19:
0e:63:e6:bf:f2:c5:1d:1d:4a:12:0d:1b:3b:bf:bc:53:86:80:
32:d1:fe:0d:cc:db:47:70:65:a4:9e:33:f8:57:33:f7:a5:cc:
69:b3:9f:bb:04:19:2f:f7:97:f9:51:eb:0a:3d:45:75:df:66:
1c:fb:1c:fd:04:18:83:04:52:09:a2:52:5a:46:76:8d:a3:31:
47:25:a8:df:fa:53:d4:8c:ba:dc:20:b8:ea:4c:d5:f4:58:50:
e8:6d:f6:43:58:cc:dc:e7:f9:a8:fc:41:87:90:90:1d:f1:4b:
ad:49:da:b6:bf:66:8e:48:56:96:07:9c:39:75:7e:f3:a2:14:
8f:ef:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:22:23 2025 by rpki-client