Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f840b3e-623c-365b-8436-d336a4c030a9.roa
File: 3f840b3e-623c-365b-8436-d336a4c030a9.roa (raw, json)
Hash identifier: 1F3oD5jECjNFOZt9uxW6eLKmnRZnIG/BQvXW6GGHvxQ=
Subject key identifier: 2C:2A:C9:3D:9F:0F:08:71:5C:85:E3:9B:8B:25:67:9A:98:4B:6D:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E929739D27B7EE9954B0FE120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f840b3e-623c-365b-8436-d336a4c030a9.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.183.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:97:39:d2:7b:7e:e9:95:4b:0f:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=90a5ab03-12fe-4c32-886b-6572d7791ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:c4:9b:65:5d:7c:67:d2:d9:34:6c:d2:40:
70:50:02:36:46:a9:ce:67:99:f4:0b:a9:a1:5a:73:
10:71:da:7d:bd:6a:4d:4c:6f:3f:65:00:3b:98:00:
70:23:1a:04:33:94:1f:47:d7:75:23:63:fa:8e:fa:
b6:7b:bb:c9:0d:4c:bd:3c:0c:87:65:46:97:ba:44:
32:34:8e:24:6e:2c:2b:b8:2a:3c:06:88:c8:33:17:
97:5e:90:ad:76:e7:1a:56:8c:dd:88:83:64:a8:93:
2f:24:cb:1a:c8:2a:d3:77:88:9e:70:08:71:5a:45:
86:f3:98:67:4a:6b:31:81:de:be:eb:a0:a2:6b:68:
fd:a5:19:ef:d1:8b:66:e0:58:68:2a:bb:ab:e0:6a:
f1:20:d3:f1:9c:45:b4:11:a7:26:77:46:cc:01:f7:
76:69:82:86:7f:65:4b:4d:de:dd:b4:03:79:40:3a:
c7:43:fe:cd:90:28:03:c7:dc:c3:dc:65:65:17:b6:
1a:0a:0f:e7:5e:09:bc:f9:8e:96:f6:b4:88:ec:03:
ca:d6:7d:32:10:2e:08:06:8c:14:3b:9b:d1:53:79:
0b:c7:d3:36:56:7c:eb:da:14:49:d2:b7:a7:b2:b9:
47:6a:ca:15:70:94:c4:0f:b6:be:af:7a:a1:98:9c:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:C9:3D:9F:0F:08:71:5C:85:E3:9B:8B:25:67:9A:98:4B:6D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f840b3e-623c-365b-8436-d336a4c030a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.183.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:c3:a6:4b:83:9f:4b:2c:4e:fb:af:5a:b0:b2:94:6b:ec:5c:
2f:82:82:c3:36:b4:bf:8c:be:d4:d8:ca:d6:9b:1a:0f:e2:65:
5e:5d:6e:38:0c:c0:62:77:c7:f8:24:58:46:0f:ed:a9:43:67:
76:2d:96:11:f7:0e:88:95:65:51:fd:ba:4e:de:a4:ef:39:42:
11:e7:1e:9a:f8:92:47:2a:b1:86:06:44:f9:ac:89:76:ae:8c:
c3:b9:03:09:1a:37:8b:55:d1:dd:a0:ed:9e:32:06:cf:cd:9f:
14:94:a0:db:69:69:37:03:ef:68:56:e2:35:e7:d1:9b:15:56:
1d:e4:56:1f:fe:4d:c1:f5:02:bd:4b:21:8a:9d:13:13:24:70:
ed:30:30:35:3a:c4:55:8b:cd:fc:49:28:21:f1:9e:6b:bc:df:
70:70:71:26:34:d0:3a:1a:2c:d3:18:ed:18:0d:40:7f:3e:48:
4d:07:c4:c3:a1:0c:6a:e0:b4:ed:59:1a:e1:c9:c9:b9:f4:cb:
d9:9c:b7:a5:e1:19:e8:fd:31:23:71:e6:1a:af:5a:46:a4:24:
ec:c3:19:dd:23:67:7b:5a:28:a9:86:a5:57:57:06:4e:f8:ea:
9f:a4:b9:98:c1:5e:bc:43:5b:12:9f:02:f2:16:9c:b6:23:b7:
88:93:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:03 2025 by rpki-client