Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36fc4300-921a-3a3b-8778-2f2ec75d1665.roa
File: 36fc4300-921a-3a3b-8778-2f2ec75d1665.roa (raw, json)
Hash identifier: BkmhZIYP310Oa+W1hvaZ7hQJ1YciN5R2u9acUKnrlww=
Subject key identifier: B7:6F:A3:E9:E2:CB:A0:25:96:F6:56:8B:62:E6:49:F4:FC:A0:8A:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAD252AE702DB2106BB5D4580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36fc4300-921a-3a3b-8778-2f2ec75d1665.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ad:25:2a:e7:02:db:21:06:bb:5d:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=a8866cef-173c-4ba4-b6d3-27eb5d6b1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:4c:b4:eb:37:95:c6:6e:92:d0:15:d8:6d:
25:05:00:59:c8:2c:82:54:2e:b9:d6:26:97:93:a9:
71:74:70:d4:c4:08:12:59:a3:d6:37:66:3b:45:70:
59:5b:3f:6f:36:dd:bf:f3:6b:cb:7f:e0:7e:77:de:
0e:d0:38:b3:9a:0b:37:a6:18:a9:f1:00:7b:2b:aa:
a2:00:c4:90:21:3e:7f:57:08:c7:4f:53:5d:78:dd:
6f:de:6f:5c:1f:38:09:98:eb:7a:db:a8:f7:45:08:
27:de:a6:e0:c1:db:db:bb:b0:0b:34:45:56:e4:9f:
fa:16:81:00:d0:e6:05:e7:6d:b3:ff:18:f0:14:5c:
77:48:76:24:5f:6b:4c:ef:c9:39:2e:23:77:2c:19:
32:2b:55:1b:d4:d9:f3:c9:e4:12:c2:d0:e5:28:a6:
a3:1d:68:50:b5:99:f9:03:7c:34:d8:b0:71:bf:7e:
ef:a5:e9:63:1e:69:52:ab:8a:30:13:6b:e9:50:be:
22:bc:58:29:2b:7e:6e:91:60:73:ed:53:6c:1e:6b:
20:7c:a9:c3:8c:bf:3b:25:13:b4:0e:91:bc:0c:50:
80:b4:d0:1c:73:32:ab:9d:1c:0c:23:64:76:ff:d8:
4c:b5:55:d4:fc:0d:0e:f8:3a:37:ab:2b:61:ca:ce:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:A3:E9:E2:CB:A0:25:96:F6:56:8B:62:E6:49:F4:FC:A0:8A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36fc4300-921a-3a3b-8778-2f2ec75d1665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:08:7c:52:4e:e7:e4:e8:f6:3e:29:f7:3a:9e:3b:a8:ff:df:
5c:b5:cf:f2:fc:c3:29:b4:8e:92:a4:68:4b:df:81:aa:f3:c5:
6a:3f:50:ce:eb:c6:d9:0b:ef:de:a9:8a:4f:cf:ff:e3:9c:2d:
ff:bf:77:2f:a7:c9:99:74:74:03:4e:e7:fc:d4:26:90:fa:e6:
85:9a:b9:7b:ac:37:34:84:21:26:13:ed:4b:da:bf:29:2d:a8:
7d:ea:7e:26:ee:de:f7:4c:aa:5f:08:dd:6a:1e:50:65:bc:64:
40:63:c1:aa:9b:60:02:8a:c5:0e:72:e9:aa:36:a8:fb:ad:de:
ed:71:1d:96:4e:45:3f:a3:59:65:d3:06:1a:a2:75:cf:df:39:
2a:93:84:c4:6d:8c:38:32:0d:4f:27:31:a6:75:b0:18:65:5d:
27:76:79:4a:30:07:b5:a0:69:b2:8d:23:1f:0b:be:7f:67:5a:
c0:a4:66:94:be:83:ae:ef:e9:99:48:15:a6:6b:6f:98:77:ae:
31:b9:d5:4a:a0:da:ae:cc:5e:f5:7a:ea:0f:b1:27:99:49:66:
29:d7:81:9f:62:08:a4:78:30:c8:cf:de:ca:75:1c:4c:8e:0a:
08:49:6c:29:6e:18:7b:fc:28:65:14:2a:6b:46:6a:ea:65:fa:
d1:c9:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:49 2025 by rpki-client