Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cb872f6-4e03-3a39-a5b7-b017629e066a.roa
File: 3cb872f6-4e03-3a39-a5b7-b017629e066a.roa (raw, json)
Hash identifier: +Ow+U8He6okWfROCqtybL6W0+vduF+mDCTFanEkcOxU=
Subject key identifier: B4:63:C1:8F:09:8E:7B:F2:4C:48:1E:77:CB:33:B0:0D:9A:AB:6C:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F31148EE0E784009395DA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cb872f6-4e03-3a39-a5b7-b017629e066a.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:31:14:8e:e0:e7:84:00:93:95:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=5781ab92-78d9-47a2-aa80-e18365303bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:c4:a9:51:f7:86:de:fc:e7:c3:7a:b8:0e:
e9:27:47:0b:54:68:b3:41:f7:d8:c8:18:9a:c2:4b:
5f:af:4e:e7:b7:4a:2b:5c:b5:3a:fa:f1:28:37:55:
f3:07:7e:44:15:09:1d:88:b3:00:4f:cd:1c:9d:28:
63:17:71:88:3c:57:64:b8:01:b1:18:a8:8d:08:1a:
f1:81:0c:47:31:9d:3a:3b:b7:08:dd:d5:ea:41:a4:
b5:d1:8b:3b:e5:b9:a1:a4:fd:ef:af:1e:bc:03:01:
c3:24:c0:e3:ff:42:39:ca:fe:f5:cb:e6:19:42:8e:
78:b0:a1:9d:a0:f9:8c:60:2c:7e:bd:de:11:60:73:
23:f7:25:8f:52:ad:b2:15:c2:16:dd:09:4c:cf:7b:
bc:5f:13:18:95:c4:28:b8:f1:4d:dd:27:0f:57:57:
fd:ef:9f:6f:8b:47:ed:25:90:33:f2:28:b9:07:79:
06:b9:da:6a:07:45:70:48:59:86:8b:54:66:54:07:
24:ac:6c:23:9b:ba:c5:c2:cf:3b:cf:06:c7:13:d7:
cb:7d:67:be:d1:73:a3:07:e0:cf:cd:5f:a1:d4:6a:
10:06:c5:df:4a:1e:5b:71:7f:25:e7:a3:10:30:ed:
a0:da:67:d1:1f:96:79:98:af:65:0f:83:a6:b1:24:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:63:C1:8F:09:8E:7B:F2:4C:48:1E:77:CB:33:B0:0D:9A:AB:6C:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cb872f6-4e03-3a39-a5b7-b017629e066a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:54:38:1e:cb:d8:1e:cc:37:75:fd:31:91:6c:dd:54:d0:18:
7c:d8:33:cc:6a:99:dd:cd:5d:e1:bb:b3:b5:39:00:cd:73:67:
84:63:91:41:65:07:54:d2:0b:16:50:de:9b:b3:b5:4c:b4:3e:
aa:dc:86:0c:92:25:6e:56:fe:3b:49:6f:05:b4:11:f5:ea:62:
84:1a:16:07:bd:f3:6a:ec:9a:92:95:9a:e2:c7:b8:a0:77:28:
6d:64:e9:bb:cc:f0:f1:91:9f:f9:45:ce:01:f0:a0:d8:17:0b:
bc:cc:88:85:d9:c1:ac:aa:a5:04:ab:4c:af:a1:27:4c:49:f2:
c5:ad:4f:3a:d9:43:fa:49:bf:79:5b:ce:84:b5:f5:7d:74:60:
f7:d2:0c:74:83:05:1f:2d:7d:77:25:72:5c:31:b7:d0:bf:08:
54:c8:31:ee:2d:a2:80:2d:83:d7:78:af:d9:a7:a9:51:38:ff:
bc:b6:05:4e:59:b6:92:2a:90:f6:d1:05:d1:68:b9:35:2c:82:
00:cf:4b:61:a8:fb:0a:ea:81:07:c5:33:60:8f:c5:bf:03:1b:
66:72:21:58:99:40:18:15:35:1d:6b:30:86:71:22:d1:53:5a:
b0:8e:c2:ce:27:b7:c5:76:dc:e5:db:ad:fb:20:6a:07:1d:12:
1a:7a:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:15:20 2025 by rpki-client