Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38827b41-049f-39f5-a0de-c22fdab4f899.roa
File: 38827b41-049f-39f5-a0de-c22fdab4f899.roa (raw, json)
Hash identifier: LCeKpnfUCbToP0ULDB9C7EhbR2fvssnUNMg4fxAEmJY=
Subject key identifier: BA:4C:53:F3:D5:1A:12:90:F6:E8:AC:39:E9:DB:4F:C1:B1:4F:E9:74
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8081B1C1725F9FCF36290E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38827b41-049f-39f5-a0de-c22fdab4f899.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:81:b1:c1:72:5f:9f:cf:36:29:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=e8010a3d-89cb-4f77-9a17-241e6fdba767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:f7:c6:71:0d:c8:6c:c8:3b:c4:37:18:d9:
75:22:c6:b6:17:77:f9:a6:79:e9:d4:3d:87:fe:8c:
88:2a:b5:d1:b7:0a:f3:44:0c:26:92:bc:d4:76:25:
a5:c5:10:c9:87:50:4d:31:d3:1b:e8:e3:c9:44:6b:
3c:a4:96:88:8f:c1:4f:d9:20:01:ec:0a:87:d1:c3:
24:db:ae:08:1b:8f:28:12:3b:c9:51:3b:36:43:f6:
ab:80:fd:65:6f:a8:2a:ac:e2:24:b5:12:fc:d3:5a:
db:ba:c8:ff:2d:5e:9f:7c:aa:97:95:d2:79:6b:85:
7e:1d:2a:74:e1:c7:d4:4b:89:9b:89:56:a0:2f:f8:
06:26:ec:00:35:7c:3f:3e:00:b7:35:a8:3f:ce:31:
44:d3:3f:6a:34:91:b9:43:7f:8b:4e:23:ac:c2:da:
01:ee:53:19:62:73:67:81:75:56:a5:c7:4d:1a:9f:
0a:aa:ab:2c:8f:c7:83:c1:7b:1a:64:e9:0c:8d:7b:
99:f2:68:08:ef:a2:11:35:f4:c3:a6:08:ab:f9:d6:
fa:3f:a3:83:ac:34:c3:3c:30:bf:ba:ee:9c:0d:ce:
45:aa:29:c7:87:86:f6:e8:03:73:cd:a1:d1:ec:65:
c1:ec:33:a7:69:86:7f:3d:ca:34:bc:a4:d2:3f:be:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:53:F3:D5:1A:12:90:F6:E8:AC:39:E9:DB:4F:C1:B1:4F:E9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38827b41-049f-39f5-a0de-c22fdab4f899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:55:08:6a:b4:74:47:24:dc:f9:43:94:1e:9b:61:5c:89:86:
7f:6c:42:27:d0:99:11:d7:53:22:17:b6:d1:95:38:3c:7b:62:
8b:6f:65:3e:25:bf:88:9b:84:92:19:5b:12:51:42:91:d7:5a:
80:e0:c3:5b:86:cf:f1:4a:24:d6:4b:34:d5:94:0e:cd:9f:99:
12:55:05:4d:9a:03:51:e6:79:47:9f:25:b3:ca:22:a2:c5:e3:
30:14:74:53:fa:21:b4:7f:79:0d:2f:c6:9d:d6:ea:99:54:3d:
df:b9:42:42:50:33:2d:bd:0f:f5:6b:38:3a:06:91:7b:65:31:
e6:0c:ea:80:56:c5:c6:aa:f3:58:3f:2c:70:cb:5e:be:38:1a:
97:8c:39:0e:21:e6:97:ad:8d:fa:17:42:c6:c8:6e:cc:45:8f:
08:c9:99:94:f2:41:e6:de:08:1b:fe:c2:0c:ae:f5:dd:d5:ca:
ab:93:19:e8:20:7f:ff:fa:db:69:7d:f3:34:87:ab:2f:ee:79:
78:8d:d8:59:44:a8:c8:b5:59:31:dc:de:f4:52:9c:1e:04:01:
89:d6:b9:b8:70:cb:75:c6:17:97:42:1e:a3:9d:30:36:ce:fe:
88:1b:56:2a:9c:a3:9e:36:72:df:f2:c4:d7:be:aa:fe:cd:a8:
11:3d:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:00 2025 by rpki-client