Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e846717-4339-3d08-b825-a7d852b2f71c.roa
File: 3e846717-4339-3d08-b825-a7d852b2f71c.roa (raw, json)
Hash identifier: UbY92YX0kAJcREKaLnGlW/lLsXdQ4c0/s0v+eqJFc2c=
Subject key identifier: A0:2A:36:BA:D0:5C:BE:AA:50:CA:80:E1:92:D2:3A:C8:A5:43:AD:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF631C669FCEEB68CA43CCE40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e846717-4339-3d08-b825-a7d852b2f71c.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f6:31:c6:69:fc:ee:b6:8c:a4:3c:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=0711c019-bc76-4df3-8cbc-da278df4239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:d1:2c:a6:06:50:89:a0:07:43:59:55:7f:
8e:77:e4:26:0b:dc:4f:b1:4f:67:db:8b:a8:b3:b0:
11:d2:3e:96:2f:49:79:07:82:14:e0:ff:0e:07:31:
3e:29:de:43:95:de:c8:a1:9c:d4:2f:9c:b1:2d:69:
c2:87:03:40:87:b5:1f:a7:12:f4:38:0a:3c:aa:50:
88:c2:9f:d0:e4:b7:d3:c9:38:90:59:c6:e8:bd:78:
73:5f:c9:24:d0:89:18:d8:97:27:69:3d:01:75:4a:
21:a5:01:a0:fa:5c:b4:2e:d4:a7:9f:ec:f1:f3:a2:
2e:bb:dc:1e:39:74:82:ee:4a:5e:ef:5d:c9:a9:f3:
4e:17:13:51:c8:bf:48:a3:c8:1f:27:15:bd:0d:df:
d7:dd:73:f1:b8:aa:b6:b2:31:15:c5:34:67:bf:74:
98:86:9e:21:97:d3:6e:53:b6:90:d1:0a:f3:eb:43:
08:ba:2e:5d:be:4a:01:9e:dc:f9:b0:94:6a:cb:e0:
77:1a:71:c7:15:15:ad:ec:ba:7d:3b:98:3e:2d:76:
91:4e:e3:09:45:a5:d4:68:4e:f1:f8:d5:d1:41:61:
38:2e:5a:df:ac:01:f0:1e:15:d0:f7:7a:d2:e4:8d:
a2:82:8c:d5:f3:92:8e:16:64:6d:6d:55:f0:2b:ee:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:36:BA:D0:5C:BE:AA:50:CA:80:E1:92:D2:3A:C8:A5:43:AD:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e846717-4339-3d08-b825-a7d852b2f71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:d0:d0:d5:78:75:de:9c:06:68:14:f4:6b:fc:3b:e1:85:de:
ca:69:34:f0:2f:70:97:15:5f:99:66:e4:a0:60:41:f1:f3:fc:
e8:d8:75:4a:6e:06:f4:45:1c:ce:46:fb:9e:fc:2e:7e:8f:e1:
13:94:cb:8d:9f:7c:63:4c:4e:44:08:48:da:f5:ec:f2:5f:49:
07:81:d0:c7:50:b5:49:85:4c:85:9b:c4:12:66:ed:75:eb:e2:
16:96:34:a7:7c:9f:ce:2e:c4:da:0c:91:4e:07:b0:ee:69:6a:
fa:d2:a8:d2:18:37:f1:54:cf:94:0b:c1:8a:f4:f4:db:ac:0b:
57:2a:01:4f:c7:f9:dc:be:8a:df:18:55:f2:88:64:eb:82:6b:
89:5a:c8:9a:c5:47:eb:85:0b:58:5c:76:3e:35:a9:51:90:3e:
6a:c1:1e:5a:3c:52:e8:3c:08:49:0b:0d:9c:3b:e3:60:6a:fb:
e4:64:c8:3b:97:fa:f1:51:9d:db:d4:2c:4a:56:8c:7a:52:83:
11:2a:52:ef:85:ca:e9:e9:57:70:54:8c:ed:d1:3c:08:26:d1:
87:d7:72:e0:e8:35:32:c7:cb:97:34:bb:77:17:06:d0:b7:a2:
e5:f7:dc:af:79:83:5d:94:5d:e8:5a:25:57:b2:31:b0:3c:1f:
5c:8a:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:22 2025 by rpki-client