Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39998231-9484-39e8-a655-6d151a2d5c48.roa
File: 39998231-9484-39e8-a655-6d151a2d5c48.roa (raw, json)
Hash identifier: deKRV2q690ctLlqQT5eAyi9Y89d/JEVIO1g++3xDok4=
Subject key identifier: 07:64:D3:B5:A4:9B:7A:EB:50:76:E6:A0:16:E2:F2:59:1C:BE:64:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCE97EAE806EBFA38E892400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39998231-9484-39e8-a655-6d151a2d5c48.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e9:7e:ae:80:6e:bf:a3:8e:89:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=1efa6284-fe04-48e2-9bbd-03030042b043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:a1:66:c7:b7:7c:fa:f2:01:b3:f8:5a:a2:
03:2e:e1:ca:b7:30:a7:29:5e:13:d5:5c:39:da:93:
af:13:15:81:1c:f9:4d:ba:df:62:e9:d6:ef:40:98:
1d:c3:50:c5:4a:4b:3c:fb:bd:75:bd:69:96:1e:cb:
8e:de:9c:d6:71:92:e1:a6:e7:cd:e0:b9:76:37:3a:
4e:d7:d7:cb:8c:03:9a:5f:67:0a:64:59:45:1f:f4:
ae:09:10:30:5e:bd:4f:c8:20:05:5d:d6:de:8b:3c:
41:57:16:59:43:94:c8:0f:11:12:3f:e8:37:9c:5e:
bb:46:c1:85:8b:07:e5:35:da:de:b1:16:5a:2f:b8:
24:76:85:a7:b2:86:e3:9a:32:d7:b7:6e:ec:e6:a6:
17:33:0f:fb:1a:fb:43:37:b6:b7:d7:ec:f5:c0:59:
4d:9e:32:e0:e0:45:0b:d8:21:50:78:d2:a8:a8:69:
78:de:5f:e0:cf:77:9c:5f:6b:07:fc:47:b4:ed:eb:
36:cb:b1:ee:ed:d3:e9:cb:35:3c:e6:cb:95:4a:95:
c2:9c:4d:be:52:99:2a:0a:e1:35:2f:bf:2f:aa:53:
84:5f:d7:03:fe:87:cf:35:29:c1:34:ef:17:74:9a:
bd:e3:7e:10:eb:36:70:5d:d7:ca:1c:84:df:bd:dc:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:D3:B5:A4:9B:7A:EB:50:76:E6:A0:16:E2:F2:59:1C:BE:64:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39998231-9484-39e8-a655-6d151a2d5c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:58:01:59:a4:95:ac:ca:01:1a:4d:62:6f:3d:02:b1:21:ca:
14:22:8f:8b:6d:41:e7:3b:b2:35:f4:09:bf:3e:02:b3:52:c8:
f9:3a:72:e7:a0:37:c4:ef:75:aa:f7:41:13:56:b5:b6:ea:02:
f0:ba:0f:c5:6c:30:58:08:c1:f1:6c:cd:fa:54:52:cd:28:60:
48:93:8d:a4:21:38:10:d8:0b:c5:b8:23:28:e3:4c:c8:c3:65:
e9:4d:ab:1e:7e:cc:d7:60:e8:ce:b1:84:a5:cc:39:f4:dd:9e:
ad:21:0f:24:cd:20:f9:71:00:c3:30:50:2f:6c:4e:bb:99:18:
c6:84:8f:c6:1d:f1:dd:e8:d6:0e:fa:da:6c:b7:8c:55:d3:f2:
f4:93:83:ac:4e:99:e3:50:17:df:8b:b9:d8:85:e6:ef:40:72:
bc:45:0d:21:ab:aa:52:5f:22:1d:c7:2b:b3:e9:52:e7:a5:d2:
17:cc:cd:a8:14:7a:d3:39:14:37:bc:db:2b:e7:ab:a3:7e:5e:
18:b4:99:a7:75:b0:e2:84:d0:f1:d6:d8:e8:86:28:f0:58:3d:
ac:48:d9:b6:f2:4d:2d:76:80:a0:49:40:21:46:39:b3:80:14:
c5:11:08:6a:01:c3:5a:d3:62:cb:50:43:46:c5:6e:f1:d8:80:
8c:59:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:59 2025 by rpki-client