Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bb53113-83c2-37a8-bba1-916963c5e2ac.roa
File: 3bb53113-83c2-37a8-bba1-916963c5e2ac.roa (raw, json)
Hash identifier: Uc/dczHTu0gK2dYw3vZQTPF7P01O/zOoMgnaHp+n5Os=
Subject key identifier: 0A:50:7B:C6:05:F1:53:68:46:F6:40:23:72:EA:AE:6C:CC:F8:D2:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E49040F015491115B95047250
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bb53113-83c2-37a8-bba1-916963c5e2ac.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:04:0f:01:54:91:11:5b:95:04:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=9f69ec26-4062-4761-945f-f030f43b3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:9f:1e:3f:b5:26:f9:bc:f5:98:ad:e1:60:
0f:3e:ef:88:ae:58:c2:05:58:bc:e8:5d:53:ec:55:
2e:46:21:f7:38:01:93:09:9d:1a:58:67:7d:4b:32:
84:f3:4d:15:4c:50:e4:3f:dd:08:e8:81:42:6e:f2:
b1:b0:09:96:33:28:9a:49:05:76:d7:38:2f:cf:ad:
9c:8d:e3:12:75:db:f0:0d:ab:03:9a:e7:56:cd:78:
95:0d:00:09:7b:52:c7:a5:91:5e:2c:d8:85:51:2b:
94:ea:2e:2c:09:b4:01:f1:2d:58:5b:bd:4d:27:2a:
de:c4:bf:18:10:72:94:21:25:00:10:7d:fd:94:cc:
5e:14:a5:14:8b:fd:64:3e:fd:be:82:fb:9f:d8:af:
9f:7d:db:e4:f5:45:83:ce:f7:ce:98:2d:92:59:f2:
81:17:75:c3:de:93:94:83:51:66:49:66:16:46:79:
1a:d3:c4:ed:1c:d5:d5:a6:02:2a:f7:ce:b8:ee:a3:
5b:e0:0f:78:b9:c3:29:bb:d1:64:2d:d7:9d:2a:9e:
c6:f3:bf:ea:74:ed:8e:94:ab:f6:26:b0:97:e7:03:
03:2b:d8:23:4d:d6:04:a6:35:aa:7c:4c:63:01:3e:
7c:80:38:4a:41:44:f7:e2:dc:1e:6e:43:b2:57:08:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:7B:C6:05:F1:53:68:46:F6:40:23:72:EA:AE:6C:CC:F8:D2:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bb53113-83c2-37a8-bba1-916963c5e2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:fa:d3:46:d7:19:1a:8f:be:8b:56:e8:e9:51:80:7d:62:ca:
9d:41:45:43:7e:5c:73:9e:5c:a4:15:9c:70:50:f7:50:2e:89:
c4:cf:c4:f1:94:66:29:1c:7b:51:4a:aa:5f:a1:20:a7:68:ec:
f8:9d:32:a3:12:aa:bc:57:f4:7e:41:58:0f:7f:d2:69:5b:9e:
5b:0b:d5:de:71:65:96:80:08:60:6b:38:fb:41:36:b4:d7:a1:
95:92:60:b5:2c:c4:c6:53:5d:a6:72:af:0a:3b:5b:a6:75:d2:
38:f2:26:36:b9:49:b7:2d:b5:64:ed:36:8c:f8:19:96:c6:65:
7f:f0:1c:0f:74:ec:52:f3:d6:9c:b3:79:69:d3:6f:b1:87:17:
9b:39:e6:69:05:f9:a4:ff:2f:68:5c:6c:22:32:b0:b4:a8:1c:
a8:06:2e:7d:82:18:d4:0a:b6:03:f5:e9:05:58:80:66:f2:fe:
42:d6:73:fc:1a:a0:14:82:67:64:1c:e9:0d:b8:63:4f:39:01:
38:66:9e:69:ea:3c:a3:9f:11:e9:7f:b5:d8:16:15:5f:5d:2c:
36:4f:bb:65:d0:a4:f1:92:51:e8:42:d1:5d:6a:39:d2:40:47:
39:ab:53:81:3c:6d:a0:6a:8f:22:80:68:bc:c3:84:9e:b6:e9:
ed:a6:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:32 2025 by rpki-client