Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4883e34c-cd4f-3f11-8ba7-bf01d4f5b389.roa
File: 4883e34c-cd4f-3f11-8ba7-bf01d4f5b389.roa (raw, json)
Hash identifier: nJt4qsRE7iTeDTE0k7isuBHLiwia/h/jV4XiJD0iQUk=
Subject key identifier: BD:7A:85:9E:A5:EA:44:71:B2:0E:97:E3:DF:1A:0C:B3:2F:DB:F5:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF16C62E46B52F83A45C028
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4883e34c-cd4f-3f11-8ba7-bf01d4f5b389.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f1:6c:62:e4:6b:52:f8:3a:45:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=bd743745-445f-4e35-b4bf-a5448d75b082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:bd:a3:77:9d:23:99:58:64:5c:c9:cc:20:
0d:4a:d3:ef:ce:42:90:f4:b3:55:b5:e8:dd:e3:bc:
d0:68:c8:b2:23:25:22:04:73:ee:bf:c2:c3:27:35:
27:ad:3c:d2:bc:26:b1:cc:2f:28:eb:27:a4:1a:0a:
6a:88:2e:4b:8f:e7:77:9f:9d:a6:52:21:69:69:91:
31:f9:d2:36:cf:34:bd:0c:d2:56:a9:05:e7:8a:16:
91:55:b0:60:29:8c:ee:ec:99:0f:5c:03:cd:d4:39:
0b:b9:33:36:32:cd:bb:c5:9e:bd:e1:dc:5e:c8:9e:
13:74:9c:09:97:c0:03:6a:4c:64:40:11:27:19:37:
d1:93:82:92:e5:ea:a2:23:69:ad:81:22:18:86:5d:
03:c0:8b:9d:84:0b:90:44:59:c0:ed:39:05:43:ab:
80:d7:ba:33:a9:b7:84:81:96:43:6c:d3:84:57:0e:
73:9c:04:ce:7e:0c:c5:78:13:18:d2:ec:68:a5:fb:
fc:59:b0:ca:c4:4a:50:f3:29:d0:46:3c:6b:65:28:
ec:17:de:50:db:51:cc:e8:f0:ec:e3:93:4f:1a:bc:
d9:f6:ca:48:5e:0f:82:72:f9:90:20:74:24:ad:cf:
27:d2:60:ff:c4:83:cf:1f:fd:50:cd:81:05:c2:a8:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:85:9E:A5:EA:44:71:B2:0E:97:E3:DF:1A:0C:B3:2F:DB:F5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4883e34c-cd4f-3f11-8ba7-bf01d4f5b389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:7b:71:8a:c5:ff:00:4b:eb:8d:2b:82:e4:88:1e:f3:05:ee:
15:d4:ea:fc:30:ca:13:6b:e7:73:c1:07:4a:f1:43:cb:a9:77:
a3:50:e5:1c:48:88:20:4b:5f:b5:d9:99:7b:f0:2c:ba:81:ac:
df:2f:dd:39:7b:01:89:fc:70:aa:4d:63:e5:38:a9:4f:c4:82:
70:b6:1e:65:65:35:59:1d:e5:6c:83:16:56:d0:f0:3d:98:17:
d9:09:79:97:f7:bc:f1:42:1e:8d:9c:df:4f:31:68:78:84:fb:
d1:87:3b:2a:a2:88:29:e9:11:35:97:75:8f:ed:f0:d5:89:0e:
be:f9:07:fe:1d:15:c5:7a:96:78:38:f7:4f:96:fd:04:93:ce:
e7:f7:2d:75:20:2e:5b:d9:7b:9f:df:3e:da:71:d0:89:37:5b:
ce:4f:33:8c:d3:f4:50:3b:ff:48:cf:bd:9a:91:ef:57:c9:02:
c5:27:bc:1a:4a:08:10:78:8f:83:c2:7a:2b:0c:e5:99:d6:41:
86:f7:28:c9:66:9e:3f:15:7e:13:63:90:6a:dc:85:50:a7:80:
06:f4:4a:98:aa:29:ae:7c:cb:f5:80:2a:64:27:d5:96:da:09:
8f:a4:5f:d7:28:39:88:7b:fb:f8:e2:8f:04:6c:c2:19:a8:2e:
53:d6:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:12 2025 by rpki-client