Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28f0968e-e5db-3af5-b97e-b9b490921441.roa
File: 28f0968e-e5db-3af5-b97e-b9b490921441.roa (raw, json)
Hash identifier: PxOlr0lEwGgpomo8QzYuZXc3blcjuWsmeAfahVHuG/8=
Subject key identifier: 00:42:8F:6A:F8:87:E6:00:3B:60:1C:DC:20:21:BC:8C:F6:B6:80:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A6D032F3C70D1B07734900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28f0968e-e5db-3af5-b97e-b9b490921441.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.140.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a6:d0:32:f3:c7:0d:1b:07:73:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=50551ef6-ff85-46ee-9bf2-167bbe90e603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:03:bf:22:12:0d:cd:79:bb:59:50:fd:82:
8a:c8:32:39:ce:a8:04:2b:38:6f:c7:46:75:6a:bb:
40:ea:c5:50:f6:c5:a8:43:d6:b2:e5:26:57:df:f4:
84:c1:2e:73:2e:95:fb:01:6b:60:94:16:16:84:01:
60:5c:01:17:1c:62:a4:72:ee:31:ba:8f:b3:f4:c4:
31:ff:9f:57:fe:d7:d9:11:d5:79:f0:09:f5:15:79:
af:db:9a:a8:54:48:94:3d:00:d4:03:5c:7e:bd:b4:
f7:f4:e9:bb:b3:22:dd:04:e4:d9:3b:3f:76:dd:0c:
43:9d:3a:b7:68:45:9d:3f:23:4b:eb:6c:49:e8:db:
b3:0c:69:8a:84:18:a9:6b:fc:8c:9d:52:9b:3b:4e:
17:27:1a:d7:d6:eb:91:bc:2a:20:d7:ca:94:c5:b0:
35:59:37:13:e3:5e:94:c6:1e:75:ab:f5:c4:5e:86:
88:d0:e3:3a:c4:18:0c:6e:e0:10:1c:36:e7:c1:00:
0e:d1:25:c4:47:3e:a0:9a:2c:1a:fb:00:72:75:e2:
a9:c4:9b:2a:c5:b7:f1:cf:c1:17:ed:5e:c7:85:47:
7b:dc:27:f7:f1:8f:b3:19:d3:1a:27:41:ff:54:67:
81:a4:b0:16:a5:09:ea:3b:e4:27:3c:4f:37:51:8d:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:8F:6A:F8:87:E6:00:3B:60:1C:DC:20:21:BC:8C:F6:B6:80:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28f0968e-e5db-3af5-b97e-b9b490921441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e3:87:53:d1:87:84:a3:7d:1a:36:76:ff:fb:12:55:8c:39:
7c:6b:51:82:15:1b:2a:7a:74:91:8a:22:47:07:6d:05:45:10:
cc:c3:67:cb:af:60:dc:27:80:76:1d:a2:ef:53:92:2e:01:7d:
6e:6e:d7:91:46:fd:b3:6c:39:99:6e:d1:a3:d5:5e:7c:bd:67:
aa:d3:96:fe:9e:e5:f1:eb:b4:11:51:f8:89:d0:20:24:79:59:
db:93:36:57:77:1c:08:50:37:76:8e:ad:83:b0:70:fd:50:3d:
38:6a:36:54:91:95:ed:cf:07:b8:2f:01:13:38:4b:fa:a6:4c:
75:6b:b6:8b:b1:9c:92:c7:65:fc:5a:68:b2:d0:47:98:9f:69:
5c:47:c2:6a:6a:96:b8:e9:69:a0:cd:b2:2d:d6:e3:95:1c:68:
9e:24:b9:16:9d:e0:1d:24:4d:96:59:76:32:34:93:16:08:b5:
4e:08:ad:44:15:d3:d5:f7:c6:53:d0:a0:8c:64:9a:3e:88:83:
f8:d8:f6:db:3e:82:65:00:bb:d5:64:a5:62:9a:60:fb:d2:5e:
65:e8:6a:25:1a:19:d7:df:42:53:13:de:39:bf:be:d7:c7:a4:
97:ac:37:5c:3c:ac:28:b9:7e:33:13:03:f2:c3:b8:a2:19:3a:
00:47:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:33 2025 by rpki-client