Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b59d1f9-6060-31c5-b48b-416744a8ccd2.roa
File: 2b59d1f9-6060-31c5-b48b-416744a8ccd2.roa (raw, json)
Hash identifier: Prj2fqTBx4R3BsnJy6wMec8vbeqCw1bG0phA8z+gIKc=
Subject key identifier: 0C:45:EE:39:11:E3:D2:BE:39:42:70:57:51:EB:8C:6A:0C:F5:56:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F84CC9C9FD61679166A81A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b59d1f9-6060-31c5-b48b-416744a8ccd2.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:84:cc:9c:9f:d6:16:79:16:6a:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=7a8c8de9-8885-440b-9860-05fe7b1b2f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:8c:78:d9:ac:a7:c5:ec:e9:cb:d5:0f:8d:
28:06:8c:6d:29:34:ac:7d:18:f7:40:13:fb:94:4b:
12:e5:70:ed:e1:db:42:dd:c2:93:50:14:c1:3b:af:
fa:b1:55:11:83:14:52:3f:12:4a:cb:47:24:1f:19:
88:94:de:0f:5e:82:12:58:29:28:f6:7c:52:11:6b:
78:54:4a:e5:d9:4b:c2:3e:ac:1e:63:46:6c:aa:a3:
c1:cc:bd:8a:e9:b6:2d:f1:33:09:4b:a6:ef:a6:d5:
71:77:3a:ef:29:83:94:b4:69:02:e0:88:73:7f:96:
7c:58:cc:73:17:20:47:22:9a:e9:ba:15:3c:0d:06:
38:c2:16:35:85:c6:b1:11:cc:bf:5c:65:da:7e:ee:
a7:d6:78:d8:6f:3c:12:a4:85:d4:d2:9d:9c:c9:b0:
5e:58:47:92:88:73:8b:64:30:30:2e:63:62:8a:4c:
14:8e:0c:f2:f9:b1:f7:bd:8e:af:01:5b:d2:f7:06:
f8:b1:c1:a6:86:5a:34:8f:ad:4c:a3:c2:aa:23:62:
77:ef:79:dd:08:44:35:b1:f7:7f:bf:16:34:e1:95:
d7:fa:1b:67:e6:48:00:19:15:3b:5c:57:ac:94:c2:
6e:f8:68:60:04:ce:81:0c:90:bb:bc:6f:c3:b0:df:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:EE:39:11:E3:D2:BE:39:42:70:57:51:EB:8C:6A:0C:F5:56:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b59d1f9-6060-31c5-b48b-416744a8ccd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:e5:1e:80:9a:3f:e8:a3:b6:98:09:9f:56:de:8d:1b:cb:2e:
ad:a9:b9:7c:2e:5a:31:8c:e2:c4:76:c8:dc:86:d6:4f:7a:ff:
0d:e8:e4:4d:33:df:15:8c:95:b8:fb:9e:99:0b:10:50:65:fa:
1e:83:50:64:9a:98:96:70:0c:61:4d:3f:16:54:d5:5d:ea:78:
47:db:ad:d0:5e:5f:72:75:40:2b:e2:be:d7:34:71:52:4d:c3:
8d:c7:e9:f7:ce:3e:ba:25:91:72:30:a3:68:54:1f:ca:fd:f3:
3a:76:63:61:c6:51:78:5e:b1:c7:c9:16:b1:00:a0:a3:40:09:
85:db:04:4d:aa:39:72:ed:75:cb:ba:84:0c:a4:47:dc:96:61:
69:7a:4a:87:08:44:56:27:46:2d:ec:fa:a3:19:bc:4d:99:3e:
75:38:8b:5e:22:0a:67:8a:31:a0:7f:9f:a2:f8:fb:63:c0:b5:
c1:58:3b:1c:af:2a:45:ac:47:73:31:7d:14:e5:b8:dc:c4:63:
ec:08:a7:31:3d:84:f0:52:33:8e:c7:77:b7:1a:ec:3c:42:37:
70:43:1a:d0:58:72:ca:62:11:e6:ab:0e:09:9d:40:d5:d2:ef:
b9:fc:ba:6c:1e:ca:c8:0c:c0:67:52:37:36:4f:8e:11:d2:f3:
75:96:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:26 2025 by rpki-client