Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bef5b6c-dfe2-3702-a827-9fcbe2d221a7.roa
File: 3bef5b6c-dfe2-3702-a827-9fcbe2d221a7.roa (raw, json)
Hash identifier: wU7HIUf7L0xhYL0lzsc+/z//tuFCDt0LP92vVy5N9k0=
Subject key identifier: 63:48:E5:9B:66:4B:BF:A6:DA:92:54:4E:4B:BF:D9:ED:16:94:31:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCE95F6E22711B06894228C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bef5b6c-dfe2-3702-a827-9fcbe2d221a7.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e9:5f:6e:22:71:1b:06:89:42:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=a56fa54e-e8c7-4968-8872-bba8fff88323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:5f:c4:10:44:5d:9e:fd:98:ff:6e:90:9b:
c9:0b:f0:e7:33:8c:17:02:72:b3:d4:60:55:d4:e2:
24:7e:a0:22:9e:8e:c4:b2:30:c0:1a:39:6c:59:b7:
c4:cc:8e:34:8e:b1:b8:36:36:4e:ee:85:7f:39:85:
50:26:58:72:23:79:64:25:f1:7e:f6:5c:b9:f2:57:
fa:02:3a:72:e1:65:6c:3b:82:fb:5e:f2:ad:e7:5d:
2d:3e:b8:de:3e:87:e6:bc:f3:a5:66:25:77:ec:b8:
6a:99:74:09:25:f7:fe:a3:db:93:21:3b:4c:7c:1d:
a0:c8:95:ac:95:1b:95:f5:08:0e:fa:f0:ac:1c:b3:
bf:9f:98:a7:6e:19:6b:9e:74:92:d3:4f:5f:32:99:
88:d8:7f:f7:9e:1a:37:c3:be:3c:98:de:22:46:90:
a6:1b:0c:51:9d:9e:17:5d:53:7b:ae:93:ee:bf:2a:
b1:b1:76:b5:54:64:f0:cc:b7:c2:a7:4f:f2:ae:ff:
74:aa:5e:bb:d1:c6:ee:15:4d:e8:e0:6b:1e:95:0c:
9d:90:ea:8e:59:24:73:bd:d5:0f:f6:14:36:7d:f1:
df:39:49:4c:c2:8e:64:b4:de:f3:79:e1:73:29:12:
fe:d3:f8:70:9b:d6:57:97:22:f9:ff:b1:09:87:99:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:E5:9B:66:4B:BF:A6:DA:92:54:4E:4B:BF:D9:ED:16:94:31:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bef5b6c-dfe2-3702-a827-9fcbe2d221a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:79:44:94:c8:5d:51:c2:65:1a:82:1c:e0:d9:a0:17:5d:2b:
08:3d:c3:7b:53:53:3b:66:29:06:f6:0f:93:f3:f8:a9:48:c2:
f2:f1:ba:0b:1d:90:b3:77:18:69:94:b8:ac:5f:25:89:f0:70:
dc:e1:26:09:2b:d5:15:e5:5a:f8:3c:c8:ae:8c:cb:a6:f4:eb:
67:52:1d:b4:ab:19:43:e7:e7:5d:8b:cb:8f:0c:5a:91:9f:f9:
fb:c9:d9:2b:d6:50:84:cf:87:6c:a4:52:aa:0a:dc:e9:b9:08:
bf:9c:4e:13:00:92:0c:51:86:6a:fb:80:4c:df:61:02:a9:4d:
27:93:f3:2d:2f:ba:e9:7a:8b:31:f1:2b:84:fc:46:eb:20:81:
f4:80:74:b9:ab:7f:51:4c:3f:fd:78:d8:f0:8f:c0:43:ca:0e:
a4:fc:9f:d0:f8:be:c2:23:a5:50:0d:d8:d0:80:5e:cf:1b:38:
01:3c:cc:a4:58:29:59:94:7c:04:c5:2c:db:ce:9f:0b:c4:3d:
ec:a4:44:d2:10:b1:eb:2f:0a:1c:14:2f:d8:2e:a5:16:0f:63:
49:84:bf:73:ff:09:18:cb:3c:c0:c6:f2:c4:0d:e9:67:6a:85:
8f:b1:9f:37:fa:a8:7c:6a:de:74:ab:17:18:ac:f7:98:9e:e7:
95:0f:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:53:18 2025 by rpki-client