Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44c57192-0dda-32ea-8712-7b28d7d05aa3.roa
File: 44c57192-0dda-32ea-8712-7b28d7d05aa3.roa (raw, json)
Hash identifier: /INlc6lhhKHrucVWkmxMICNhH/tX0zydnW1ef26Wk+Y=
Subject key identifier: CD:A4:6A:71:C3:E6:CB:C5:7C:8B:10:F0:49:69:1C:DE:66:59:AE:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE9E54AC2D8685116D0D2FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44c57192-0dda-32ea-8712-7b28d7d05aa3.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:9e:54:ac:2d:86:85:11:6d:0d:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=696f0bae-1cdb-4487-888d-466aa1c11ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d9:ab:57:fe:9e:4f:2b:3b:e7:6e:a9:8e:e4:
5e:bf:aa:0e:60:3b:a3:ec:5b:83:01:34:2e:2b:75:
22:f2:a6:8b:a8:3a:98:f7:09:81:99:6e:c4:34:81:
fe:a3:20:2d:43:17:07:66:fd:f5:cf:06:6e:e5:c6:
9a:4d:3a:78:fa:48:26:e7:f3:5b:d2:39:7f:39:f0:
9c:d0:be:6f:18:96:4a:31:9e:db:f3:a6:7d:2a:d2:
0d:9e:9a:71:c1:b8:b2:e2:95:df:0e:75:2e:38:74:
03:b5:7e:f4:98:25:92:33:40:43:9a:3b:19:6c:f0:
35:85:b2:c3:dc:1a:58:e5:da:57:dd:5e:9f:8e:0b:
c2:b6:36:ca:ad:c8:d6:75:87:35:19:b2:27:7f:d5:
d1:dd:ed:81:10:97:ba:e6:eb:f1:32:d8:49:56:3c:
9f:64:e9:55:5d:89:8a:a4:4e:5e:50:c2:3d:4b:c0:
8c:9b:3d:07:f1:a0:2b:d7:c2:e2:01:c3:63:f8:53:
ab:02:63:ff:f6:9b:bc:25:82:4f:0d:89:96:9b:12:
57:d3:d4:36:f1:10:9a:bf:ad:da:08:cc:24:47:6f:
34:aa:35:83:7b:b3:36:08:f6:46:9d:3f:75:33:d5:
39:13:69:d9:e7:af:13:75:de:72:41:69:b9:a5:6f:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:6A:71:C3:E6:CB:C5:7C:8B:10:F0:49:69:1C:DE:66:59:AE:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44c57192-0dda-32ea-8712-7b28d7d05aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:40:9d:ee:8d:08:45:b2:d5:bc:41:41:21:e9:c5:33:95:1d:
2f:4a:c6:06:62:a3:00:24:36:b4:16:a0:1a:b0:a4:f0:e8:30:
70:23:f5:7b:24:ce:50:c6:7d:bc:83:fa:00:c7:3b:cf:a2:66:
94:a9:9e:55:6a:25:bd:74:92:cb:f2:14:91:ca:be:f0:2a:3b:
f0:2f:18:a5:2e:dc:9e:d9:8c:58:df:1f:7b:99:9d:30:ca:33:
a8:0f:c2:03:ea:02:50:9d:48:5d:85:a4:4e:04:f2:c4:31:f0:
78:da:ed:0f:c9:03:f5:eb:21:b7:cf:c9:f1:ba:d7:45:c6:bf:
38:68:6b:77:b4:4e:77:d1:27:49:b0:4a:38:e3:46:57:55:33:
42:6d:99:12:9b:00:17:b4:de:f8:e1:d4:b7:b7:95:63:b0:2c:
34:96:64:96:f9:17:a5:6c:4a:96:a0:19:af:df:35:b1:3e:37:
fd:8a:c4:85:e8:4a:09:c6:28:fc:cb:7a:e6:f2:25:63:40:4f:
e9:08:1e:b7:3c:fb:4b:74:1f:a2:33:77:21:6a:b8:bc:d4:4c:
ec:5f:92:6c:9f:09:74:aa:67:2c:8c:dc:fb:23:b8:b9:62:5a:
00:38:03:7b:3e:c0:29:3d:ec:6d:c5:7e:55:cc:f7:a2:0f:bd:
4e:f6:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:44 2025 by rpki-client