Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/425404ca-0421-3fc9-9b6d-f46e6c5bb2aa.roa
File: 425404ca-0421-3fc9-9b6d-f46e6c5bb2aa.roa (raw, json)
Hash identifier: pOYP/KyRhKvwYZ2Md4rCI6/Na5NOYPkU26XsGBLMeYU=
Subject key identifier: 1D:04:A1:67:AD:12:68:7C:FD:F3:FD:0D:BF:D6:84:39:C8:8D:CA:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6FC7C19816D95B0D29F49180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/425404ca-0421-3fc9-9b6d-f46e6c5bb2aa.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:c7:c1:98:16:d9:5b:0d:29:f4:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=cabcf464-7856-4818-bdd2-639af39197be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:76:4f:ba:07:b6:38:0f:b5:ae:8f:c4:e6:
8a:1f:e7:1b:e6:3d:5d:1c:39:6a:6b:1f:45:e1:74:
7f:ab:61:be:41:1d:08:36:7e:a8:07:83:4f:2f:91:
10:b2:fd:30:5d:26:dc:16:53:a3:2f:f9:5e:78:88:
e5:79:19:e1:5e:f2:6d:b1:16:66:38:e7:63:6a:b3:
eb:aa:21:d0:36:01:d5:c7:4f:8f:ed:94:e5:fa:bd:
f8:c1:2c:bd:e3:71:cc:1e:c8:03:ed:e8:a4:93:9b:
96:16:0c:63:0a:71:27:e4:c2:d5:c0:9f:38:ea:eb:
08:90:35:97:58:7e:a3:48:47:9b:a2:08:67:f7:95:
57:95:e1:83:a4:76:26:56:ed:e8:26:ed:54:01:a0:
d5:8c:9b:fc:09:e9:79:d1:a1:31:e7:90:3e:0d:0a:
e6:18:c6:ca:30:31:48:e0:9a:36:8f:e8:ed:14:77:
5a:53:3f:84:df:4a:44:a9:79:17:6e:a9:5c:18:16:
40:63:39:fe:a7:d8:2d:13:3a:4e:b1:b3:dc:59:9f:
aa:a0:48:40:02:b3:1b:df:48:fe:06:d6:2b:90:d6:
6f:29:7b:cb:d9:52:ee:ab:53:a7:3d:9a:58:20:4c:
8d:15:d3:bd:74:f6:10:7e:01:03:0c:76:f3:a8:1a:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:A1:67:AD:12:68:7C:FD:F3:FD:0D:BF:D6:84:39:C8:8D:CA:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/425404ca-0421-3fc9-9b6d-f46e6c5bb2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.172.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5d:2e:39:08:c2:cb:90:ce:31:09:16:02:54:66:e6:0f:29:
40:83:45:26:fc:bc:4b:44:1c:59:77:12:09:ea:ea:85:a3:8f:
1b:41:c0:c1:c7:3d:f8:b0:37:f9:6f:1c:30:1c:2b:29:d1:ca:
0b:ff:16:93:ec:1a:50:6e:16:40:ed:1d:dd:a1:a5:d3:d1:5c:
14:27:87:5b:c9:62:28:b2:1d:f2:00:aa:ee:5d:d0:c9:c0:68:
bb:22:1e:dc:48:d6:c3:09:2a:49:65:07:a0:27:7d:1f:56:45:
29:a1:36:e6:c8:ac:04:e7:df:fc:bf:cb:31:0d:98:a0:93:69:
87:4e:be:8b:2a:4b:7f:61:6f:ec:7e:7e:4b:d3:c1:0b:38:64:
a9:66:bd:7e:5e:21:d9:fe:ca:91:d3:78:fc:b7:85:2f:79:c0:
1f:8f:d1:c8:88:fb:6b:cc:c8:97:48:38:f2:f0:ce:72:c6:43:
14:1d:d3:0c:82:6d:0e:57:bc:67:28:ba:12:20:30:a0:7b:5e:
b7:60:3b:49:9b:f9:14:d6:1d:9a:19:a4:23:28:e1:0a:8d:f0:
00:e0:12:83:33:87:e9:7f:9a:41:8a:35:26:8c:6c:fc:e1:ca:
a4:8f:4c:44:d4:77:98:77:a4:8b:7a:59:43:58:b0:10:66:5b:
cf:d4:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:47:07 2025 by rpki-client