Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4421be4f-58eb-3182-940e-d2f4f65cf160.roa
File: 4421be4f-58eb-3182-940e-d2f4f65cf160.roa (raw, json)
Hash identifier: Rk5WZbaqp00GEn3qqeJupJjI/5D3TuN0qpMWM5BZLQ8=
Subject key identifier: D7:F6:FA:48:71:D2:CB:79:C7:34:71:D9:01:93:89:75:74:D9:94:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF86E31D90AE76D1D630F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4421be4f-58eb-3182-940e-d2f4f65cf160.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f8:6e:31:d9:0a:e7:6d:1d:63:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=837966b4-9e10-49f2-a5af-bddab9d1225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:86:d7:49:2e:d4:10:23:30:2e:c9:fe:07:
d9:42:a4:f9:5f:0b:9e:e5:0e:19:2a:a2:6c:63:cb:
25:63:f4:bb:c6:f1:12:93:2c:31:b4:af:21:98:ae:
c1:86:53:54:b5:48:bb:c0:3a:22:b4:2e:11:ee:9e:
2b:e6:4c:dc:88:be:10:51:b6:6d:60:d8:14:ff:27:
e0:8b:02:06:72:36:a0:29:3f:37:5e:b2:da:92:fd:
a6:fa:f8:74:fa:3b:8d:9f:7b:ec:04:12:8c:d5:e2:
97:8c:d7:7d:7d:9c:4c:77:0b:33:f1:d5:15:22:e7:
61:07:45:2f:65:02:a9:98:36:da:49:92:dc:59:2a:
d9:97:98:29:d8:b6:41:ef:78:32:f6:b8:f5:af:ca:
c0:d5:fe:76:39:9d:b3:86:85:7d:69:15:73:b4:18:
4f:78:38:72:28:86:24:4b:0c:6e:cf:13:f5:4d:68:
a0:11:1a:7f:c4:52:b0:da:a5:b8:3f:74:b9:49:ed:
b6:b5:75:5c:2e:ed:17:5b:97:92:80:d7:7a:42:48:
22:28:14:77:87:3d:65:a6:c1:07:70:d6:2b:e9:bd:
6f:44:be:a0:d0:db:eb:56:0e:b5:7d:28:ea:4b:db:
23:3a:f2:2c:d5:82:58:a1:a1:14:41:1e:98:51:c9:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:FA:48:71:D2:CB:79:C7:34:71:D9:01:93:89:75:74:D9:94:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4421be4f-58eb-3182-940e-d2f4f65cf160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:84:10:59:6e:40:fb:91:fb:a6:5b:b9:f8:b9:45:75:29:69:
dc:18:8e:76:5d:48:f0:e5:62:d6:0a:8c:b2:1c:aa:7e:ed:b1:
74:f9:96:e5:ca:ac:7b:bf:1b:9c:bc:e4:4f:3c:3c:bf:91:88:
b9:ba:f0:cf:f7:e5:da:0d:77:0d:95:90:c0:f5:98:7d:a6:84:
a4:f4:85:77:46:e9:64:19:46:6f:73:b8:90:6e:37:c0:bb:30:
c3:7a:18:18:ba:26:ab:82:0c:12:3b:7d:5f:ef:ed:c5:ae:34:
e7:cb:72:c9:79:92:71:44:d8:a4:dc:f9:54:a8:2e:a9:44:e7:
2c:23:d0:d7:0a:cd:b7:34:fa:93:5d:be:46:6f:d8:75:b5:28:
ea:8a:3f:52:e8:07:42:1a:4c:74:18:ea:f0:ae:5b:ea:82:96:
22:c9:f6:dc:ea:34:26:f0:45:66:cc:e0:b7:ba:b1:e9:9c:3a:
0f:5d:f0:0d:ba:a9:ea:e2:19:7c:b0:de:68:b1:42:c5:eb:03:
67:ee:23:81:df:de:a9:8f:31:32:03:7d:e3:f2:78:c1:00:40:
f2:94:8a:1a:87:b7:00:ae:49:5f:37:38:57:37:63:0c:3d:2d:
35:52:50:d4:5e:83:14:8a:0f:d3:4e:e8:63:64:24:20:65:5f:
49:08:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:22 2025 by rpki-client