Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3890d12e-7300-3fd8-8c5d-b99de87fe1ab.roa
File: 3890d12e-7300-3fd8-8c5d-b99de87fe1ab.roa (raw, json)
Hash identifier: c0/gpZZSmYaKuT0dj6xx+t2CuBT/J0Hv2dCm8m/+3n4=
Subject key identifier: 7A:11:B4:47:8A:D3:63:03:AF:7C:EE:26:A6:C9:30:4D:DD:E8:E3:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB326BF80918D02E7B126180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3890d12e-7300-3fd8-8c5d-b99de87fe1ab.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:32:6b:f8:09:18:d0:2e:7b:12:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=1295edcf-c2bc-48a4-8f68-12c11dc48115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:02:d7:86:ac:c7:2f:16:88:38:0f:bc:b6:
3f:48:0b:c4:af:2a:50:89:ea:f4:ed:29:12:cd:48:
12:d1:2a:39:14:0a:1c:91:a3:9c:47:71:f9:9e:33:
35:2c:d6:82:d9:ba:e7:37:81:93:fb:a2:30:0a:01:
b1:59:c5:d0:ed:25:94:8d:c3:e2:7b:ad:99:f5:74:
37:7a:83:69:ac:dd:d9:25:46:b7:ac:53:09:31:ec:
a0:b2:a4:b9:33:95:92:88:fb:79:d6:c9:5e:46:3a:
54:2e:89:39:a7:68:11:c6:21:e1:fa:6b:f5:cd:ec:
36:a6:5c:9d:10:aa:32:b7:b4:6e:66:9a:7e:e0:fe:
fa:a6:9e:26:03:04:66:49:3a:51:de:42:71:fb:c4:
2a:08:62:59:f2:c0:d1:11:97:57:b0:1a:3b:89:ca:
2c:a6:a0:00:aa:83:12:22:c7:35:22:f3:93:43:23:
a4:72:5b:2b:ac:11:09:75:54:df:77:6e:df:84:ca:
e3:f6:db:32:a2:40:fb:9f:62:c5:fa:ec:ec:30:17:
c7:a8:a5:30:ac:08:ce:29:59:44:0a:f1:6a:a3:c4:
12:27:6a:cf:fe:71:ab:72:dd:66:68:02:5a:2c:e0:
c2:dd:35:2e:d2:60:70:ad:61:a8:3b:b5:a9:86:61:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:B4:47:8A:D3:63:03:AF:7C:EE:26:A6:C9:30:4D:DD:E8:E3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3890d12e-7300-3fd8-8c5d-b99de87fe1ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:47:7e:6a:e3:69:56:7b:59:5a:3b:42:f5:59:57:ba:1d:f9:
3b:1c:be:6b:9f:e0:d5:ca:5e:a4:4d:3b:de:ce:61:53:9d:e9:
1c:2c:5f:58:ba:2b:a1:6f:7a:d1:50:3a:05:c6:7b:99:51:b6:
87:e5:10:f4:ea:60:22:6c:d4:a2:50:86:cd:65:a4:27:5c:89:
64:6b:6e:12:6d:b9:d0:90:fe:60:04:99:d6:ad:9e:47:60:3c:
25:7f:41:11:71:cf:72:be:6f:ed:ce:78:c0:a6:c5:c4:0c:e4:
e7:12:c8:e1:01:bf:53:9c:a0:5e:07:43:e0:4d:e8:b6:26:d8:
03:5c:86:4b:59:5b:9a:2b:dd:43:b8:52:93:d4:ba:fe:9f:c0:
57:48:80:de:19:c5:b1:c9:95:58:79:cd:85:7b:09:67:13:84:
57:1f:00:ee:ba:b1:f8:c3:ec:15:2e:de:53:3a:db:ad:d3:16:
4e:ad:a0:a3:85:dd:3e:df:1c:07:3e:f8:e8:6a:80:86:42:41:
19:0d:f4:06:6a:e7:0a:1a:cf:a2:5f:eb:e6:69:d1:bd:a0:57:
a9:9c:05:84:2a:fc:73:a8:bf:a3:87:5a:5f:6d:f0:6a:f1:9a:
52:95:2a:1f:09:f9:06:be:8c:78:a9:cf:b5:9a:1a:e8:71:40:
bb:3d:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:52 2025 by rpki-client