Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa7bdae-2f0c-3af7-bdc3-1f2a27544707.roa
File: 2fa7bdae-2f0c-3af7-bdc3-1f2a27544707.roa (raw, json)
Hash identifier: 72Z0Pq0Mq4IhG1yxNRgYG41zAKNsiEbiqOiwm/HzW1U=
Subject key identifier: 40:53:4D:39:B0:56:2D:43:B4:7A:FB:1A:7E:BA:90:61:F6:06:2C:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B9049831FA898E5B2AC0A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa7bdae-2f0c-3af7-bdc3-1f2a27544707.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:90:49:83:1f:a8:98:e5:b2:ac:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=1905848c-9486-47d4-a859-c31d6875ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:11:ca:df:52:e7:05:92:c4:9e:79:69:a7:
13:72:3c:0f:dc:eb:87:2c:04:51:fd:61:01:fe:8f:
aa:a7:31:8b:54:a7:17:ad:64:09:25:8a:1d:9f:cf:
ac:53:b6:c9:58:05:d9:20:25:b8:50:b5:99:d5:28:
8a:46:46:b3:24:da:b7:e9:37:ac:36:6d:0b:4b:cc:
b9:c3:40:68:1e:e2:a6:f8:51:ea:17:47:53:81:f0:
35:12:ff:1a:f2:38:d0:c2:fb:5d:b7:52:ca:f4:1b:
e9:8a:3d:21:6a:c4:a5:25:6c:ec:79:7e:2f:2c:4d:
0e:31:fa:12:ab:8c:f0:81:69:00:b9:33:6b:f8:52:
c9:ca:be:45:89:83:d9:db:1a:da:7a:dc:91:7c:75:
13:53:b2:9c:38:35:a4:45:87:a1:c8:e4:dc:3d:21:
99:5a:bc:db:f1:7e:82:5a:31:df:ef:a5:d1:7e:0b:
f3:50:e4:08:c0:32:06:37:63:9a:aa:47:f0:24:bb:
12:86:39:4b:d3:8d:14:46:c6:0e:9e:6e:10:40:cd:
64:9f:79:dc:6d:5f:b0:95:fc:2c:2a:dd:84:f8:dc:
ae:e6:a8:91:65:e6:e8:0b:a4:32:f5:6c:fa:be:78:
67:cc:02:cc:e2:21:d8:74:ad:15:9c:13:6e:98:0a:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:4D:39:B0:56:2D:43:B4:7A:FB:1A:7E:BA:90:61:F6:06:2C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa7bdae-2f0c-3af7-bdc3-1f2a27544707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:98:a3:fa:0b:2c:99:cb:8b:98:39:11:aa:e6:13:41:c9:86:
e8:bb:3a:2f:ad:c4:3f:3d:93:fa:b7:e3:f6:75:15:57:f7:1b:
23:4d:32:70:9b:8f:58:e5:e6:2c:cd:65:c0:0c:1f:cc:11:51:
25:77:f6:73:04:48:a6:05:d3:7b:db:1f:f0:77:5a:97:69:fd:
16:21:97:51:8a:5c:b0:38:35:97:46:f8:cf:88:34:1e:54:00:
a6:53:16:ac:45:c0:a2:ff:24:d8:fc:04:a4:ed:7f:30:0e:04:
a3:c7:77:06:31:83:19:e5:87:24:a8:c9:c4:bc:54:c7:89:a7:
e5:c6:b4:ce:c1:8f:ca:72:09:d6:2f:34:8a:6b:62:20:17:91:
5a:c4:51:74:4e:d2:03:55:91:a7:21:cd:7f:0e:32:a0:00:27:
2c:67:1e:de:ed:6f:2e:1d:7d:a9:25:b2:4e:eb:62:23:ff:93:
1e:89:7a:c9:a2:fe:62:4b:1b:13:aa:7c:bd:ff:31:cc:9c:94:
47:5e:92:72:6f:44:41:3f:c3:4b:fa:fa:99:ca:22:9d:ce:52:
36:59:74:ca:05:04:a3:d1:55:f3:7e:9b:97:77:4f:43:2a:58:
16:87:38:0c:d0:8c:e8:c2:10:95:7b:29:84:10:ec:1b:2e:e1:
e9:f3:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:01 2025 by rpki-client