Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38e58109-e549-3d55-9d7b-c91ee48d0b56.roa
File: 38e58109-e549-3d55-9d7b-c91ee48d0b56.roa (raw, json)
Hash identifier: jpPI9wKhf4NjA3OHPSOethIZeDLAo0j8ivso6uZ2ocM=
Subject key identifier: 06:AF:8C:A1:6F:68:B9:22:AB:64:8A:50:1B:17:69:28:B1:C4:AC:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80BDDFC5E38FAABFC07BB600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38e58109-e549-3d55-9d7b-c91ee48d0b56.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:bd:df:c5:e3:8f:aa:bf:c0:7b:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=3f8938b7-ffb5-4f81-8009-daee1917ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:50:4d:66:9b:d2:1d:02:71:98:b7:36:98:
90:fa:a6:9d:d3:88:8d:27:14:4b:69:77:59:65:40:
93:9e:28:20:79:3f:a9:1d:cd:b4:d0:2e:25:b5:aa:
04:c9:59:14:3d:19:4a:87:1d:67:3b:4e:ed:93:c3:
2c:2a:42:49:d9:cf:2b:dc:c4:fb:dc:39:01:0d:dd:
d6:ac:42:59:f0:94:ae:7f:fa:5e:70:78:83:bc:78:
42:9c:44:ad:cb:5a:44:f5:59:e7:5c:46:ab:e2:a6:
0d:40:35:f5:4d:3d:54:9f:19:e0:07:3f:d3:9c:d6:
a8:b9:c2:17:18:57:d1:fa:3f:bf:32:95:88:d9:7d:
d6:5f:f6:f8:68:19:83:bc:87:9e:98:cb:f4:fb:cc:
a9:ee:b2:a3:b6:94:7f:91:1a:af:5c:65:e6:c5:68:
57:a9:3b:93:ed:42:a5:30:81:c5:5d:3d:48:cf:2c:
2a:b4:62:7d:b5:24:69:5c:fe:4c:92:70:21:a8:5e:
37:07:f9:5e:a5:b2:cb:48:f7:5a:ba:22:66:bd:24:
52:af:a5:a5:aa:85:eb:25:fc:e5:4e:ac:35:5e:95:
8e:be:1a:b5:fb:4e:94:70:15:64:af:e8:3a:cd:79:
98:a6:9c:7d:4a:32:e9:97:52:c8:6c:9f:c3:88:a9:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:8C:A1:6F:68:B9:22:AB:64:8A:50:1B:17:69:28:B1:C4:AC:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38e58109-e549-3d55-9d7b-c91ee48d0b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ce:99:c7:75:34:af:db:70:b9:0c:d8:83:ad:58:6a:31:58:
51:75:cf:91:57:0b:28:a2:d2:77:90:4e:8b:62:72:31:81:56:
ad:7c:07:57:d3:85:79:6d:8a:ac:70:9b:9d:eb:94:7e:3a:ab:
ff:15:5e:61:1c:4c:14:ac:18:53:f3:08:39:8d:ba:91:7b:30:
7f:d7:67:46:4e:35:c6:20:d1:22:f4:8a:f2:15:a2:66:e4:2c:
bc:3d:99:74:c1:89:88:38:da:0d:58:69:40:1b:93:5e:95:36:
1f:7f:2a:90:cb:c8:a4:07:79:df:0f:37:74:fe:6a:e9:d1:ff:
8e:c7:fd:e0:15:84:1f:70:7d:26:7c:5f:f5:23:0b:d2:b6:fa:
30:61:8c:32:21:7f:aa:dd:3f:86:86:55:61:2f:27:32:ce:6e:
42:cc:45:c3:35:60:ba:5e:60:b0:b3:14:a1:f2:10:3e:56:5f:
bd:d1:17:fb:b1:db:38:88:6c:9a:76:aa:a0:a9:da:b9:c8:ce:
e3:e1:0c:86:24:3c:be:7a:52:b8:76:da:6e:e3:be:43:22:73:
df:66:00:60:70:e2:82:9e:18:47:5b:0a:88:51:e5:2e:44:7e:
19:11:bb:6c:8f:c0:70:e8:f8:cb:41:bf:79:22:5b:da:28:87:
d1:36:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:39 2025 by rpki-client