Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37039ebe-d3f4-3aac-ab68-83807efb8a06.roa
File: 37039ebe-d3f4-3aac-ab68-83807efb8a06.roa (raw, json)
Hash identifier: sLrfhs03WZyVRACYS/ckqNz2QhnaknmRbFi1RT7f7ps=
Subject key identifier: 31:EC:A9:06:10:86:F4:10:E3:00:B7:65:FE:C3:8F:23:F9:09:AA:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7EEB18642C7BB8E4668A2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37039ebe-d3f4-3aac-ab68-83807efb8a06.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:ee:b1:86:42:c7:bb:8e:46:68:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=b61a4c8f-9fd0-4078-873b-cb5b39aaae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:1b:2f:2f:22:75:c1:b6:1f:b6:1a:17:4e:
48:c3:f9:ff:fd:94:fd:77:40:d0:7d:7a:a3:f9:99:
88:4d:06:4e:26:1f:9a:45:30:24:ea:7e:50:4c:7d:
8e:26:9f:4a:33:dc:3a:fd:92:09:2a:18:dd:dd:82:
f0:56:14:01:46:18:50:98:0d:7e:ec:39:4b:f2:09:
21:02:89:f2:c0:91:e2:75:62:01:bc:ee:a5:a5:d5:
cd:56:c0:e9:aa:98:4c:64:41:92:c2:a4:00:6b:92:
3b:13:90:59:f2:9c:7d:83:7b:e8:a4:18:0f:24:f0:
3a:d0:aa:c5:e2:f3:38:d9:50:24:3c:38:52:8a:9d:
b6:9b:9a:6d:da:24:3c:5e:cf:37:ef:96:c2:4b:a2:
24:b0:3d:65:9f:ee:d3:c6:60:fd:da:ea:8a:79:ca:
de:29:d8:04:5f:7f:c3:5e:7c:41:10:de:1e:45:e5:
f6:2a:62:5e:18:36:d6:a7:23:56:3e:df:62:ed:83:
27:88:9f:eb:41:e1:ef:83:d3:6f:a3:ac:5b:e7:b5:
5a:8e:0c:92:aa:e4:76:f6:4d:20:6b:59:a7:09:74:
bb:26:78:59:f6:dc:ad:9d:e2:07:fd:0e:e4:93:e3:
67:67:4e:aa:a8:87:74:d4:17:1d:7d:c4:2d:46:aa:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:A9:06:10:86:F4:10:E3:00:B7:65:FE:C3:8F:23:F9:09:AA:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37039ebe-d3f4-3aac-ab68-83807efb8a06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:61:f9:6b:1f:66:c9:3c:66:84:c3:a6:1b:a8:e4:2b:5f:38:
6c:0a:07:60:e6:c9:ab:4d:c3:6d:50:51:7b:b4:c6:42:2b:21:
1a:60:d2:dd:8a:65:ae:a5:19:4c:c8:08:45:af:26:c1:38:f9:
0b:93:73:14:7e:ab:71:a8:fe:7f:fa:3e:ba:06:5f:69:3a:47:
6b:c8:25:d5:9d:a9:ff:0c:80:4f:dc:f2:24:57:aa:e1:59:e9:
15:59:2f:f0:f4:e5:c2:e1:4f:aa:9a:cc:4d:a9:2c:fd:67:ff:
81:d5:fc:c3:f7:55:48:71:33:01:75:23:8e:e0:76:a1:0c:79:
e7:4d:df:da:ab:7a:ca:09:d1:e0:1d:dc:6b:e5:c5:10:36:d0:
5d:9d:ac:d9:3d:bb:87:1a:63:39:20:a2:26:02:be:96:c4:24:
2b:f7:e4:11:09:23:e2:26:40:1f:01:bf:ef:af:e5:eb:e0:1f:
70:3f:5a:20:53:67:17:53:2c:46:06:6f:f8:af:a2:c2:03:5d:
13:3f:ea:25:57:3d:a5:36:c5:d8:51:c1:e0:9e:84:ce:10:92:
59:dc:00:f3:78:22:2b:b6:9e:97:5a:c7:c3:d7:8b:3b:07:b9:
9c:98:cc:af:a7:b3:08:fc:f4:e7:d9:e8:3f:13:55:a8:2a:60:
ab:b3:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:27 2025 by rpki-client