Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4537bc9b-01c3-34a6-bae3-01072a672165.roa
File: 4537bc9b-01c3-34a6-bae3-01072a672165.roa (raw, json)
Hash identifier: 6Yzui+HOdKe96TobLFPI2wEodcrsS8Ny9Dul/t6eXfc=
Subject key identifier: E7:6C:7D:96:48:34:AD:92:ED:B7:7B:59:31:C2:0C:72:FE:ED:D6:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF8B1AD7CDE267C237DB3B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4537bc9b-01c3-34a6-bae3-01072a672165.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.64.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f8:b1:ad:7c:de:26:7c:23:7d:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=e7d0b32d-2c91-4fb2-be4a-28326d1c4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:19:c9:c2:97:03:f7:34:da:9d:02:f9:a5:
c1:44:e4:7b:55:8a:be:d8:40:ef:20:3b:e7:dc:6f:
91:18:00:3c:77:f6:d9:99:81:07:65:a7:4d:cb:61:
e3:d3:a4:d3:85:39:54:0f:1a:4b:cc:0b:98:d7:8e:
6c:0a:7b:4d:d6:dc:76:a4:3f:b9:86:8e:a4:6e:1a:
42:64:d4:8c:f1:46:4a:82:e6:d9:e3:bb:2b:ea:43:
34:ae:e3:6a:eb:67:45:e8:39:03:d6:f7:3f:25:b9:
a0:42:39:73:46:ec:7b:4b:24:2f:da:e3:89:94:21:
31:63:db:13:cb:e7:a5:10:16:77:c6:74:0d:78:81:
71:b8:69:82:35:ed:e4:e7:09:a7:06:f9:fa:d2:e7:
fb:3b:dc:fc:8b:22:f3:cd:96:10:5f:3d:af:c5:07:
4b:b7:85:56:d7:1c:8d:8b:78:97:4c:48:6f:fc:33:
61:70:89:0f:49:82:25:48:ba:20:f3:32:d7:d2:37:
86:37:85:de:24:ba:ba:05:0d:81:df:dc:21:ab:e1:
c9:6f:73:6b:8f:6b:4d:ba:53:22:56:39:de:42:a4:
02:1b:0c:b9:be:b7:05:28:f9:85:bd:71:62:ae:69:
cd:42:e0:54:7f:9d:05:30:ba:59:75:5c:82:aa:bd:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:7D:96:48:34:AD:92:ED:B7:7B:59:31:C2:0C:72:FE:ED:D6:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4537bc9b-01c3-34a6-bae3-01072a672165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.64.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4e:8e:a6:1c:6b:07:76:91:7d:ff:ae:3b:66:9f:47:7b:c3:
14:4c:ad:0b:42:ad:ec:28:31:af:d2:b5:b4:6a:c1:3d:9f:1d:
ba:e0:c7:d7:9f:2c:82:22:6b:cc:82:7d:61:32:e9:e9:61:e2:
09:c5:0b:17:a1:b8:d5:dc:c8:92:fb:d5:d4:80:b5:2e:6b:4c:
ff:65:98:2a:2b:bc:55:6c:89:f1:62:d3:c7:b8:d1:c7:65:7d:
63:8a:c7:7e:40:01:e3:35:09:2a:cc:f0:ae:55:ca:15:48:e7:
63:f1:73:1f:e4:91:74:f8:09:c4:45:a4:6c:99:63:4a:48:ea:
7f:96:db:13:e0:00:c8:b3:f1:31:6a:36:68:dc:5e:c0:5c:56:
2b:60:11:fd:8b:3d:0b:66:88:e5:ca:cd:02:3e:fe:6b:7d:10:
a6:77:7d:69:e9:6d:3b:f5:54:62:44:88:28:bc:63:43:3d:00:
10:6b:20:83:11:ed:c7:62:79:28:57:9f:89:36:7b:3b:57:f6:
7c:00:4f:e3:00:6d:c5:ba:b6:96:7a:cd:03:74:3b:95:fe:1a:
d6:3e:26:e7:90:19:d8:12:7e:1a:4c:db:e8:91:ff:21:be:92:
35:f0:1f:2e:27:71:b0:3c:4a:72:f0:37:02:b0:67:6f:d6:0c:
b5:0b:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:38 2025 by rpki-client