Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48b3c281-9f71-3fb6-acda-aef668d6d603.roa
File: 48b3c281-9f71-3fb6-acda-aef668d6d603.roa (raw, json)
Hash identifier: HIKDB/1m387JaelMwYa7GSJqFNtquU0yj7gLT9EzFyc=
Subject key identifier: DD:66:5A:E1:BF:09:1E:9C:85:7D:59:E3:CD:04:17:FC:26:97:40:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF1E9A723A9D5A79561866F78
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48b3c281-9f71-3fb6-acda-aef668d6d603.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f1:e9:a7:23:a9:d5:a7:95:61:86:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=b1d9c8f4-7845-48af-aaea-0f399f19c272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:05:fc:96:68:36:bd:cf:e0:5b:30:27:1a:
67:19:f9:a8:1f:2b:f6:89:d6:53:69:d7:cb:82:eb:
31:ec:d2:96:34:15:08:42:75:78:33:1f:63:ed:38:
c7:26:f5:57:53:d7:55:9e:36:38:75:df:0b:ad:0b:
17:ba:61:70:8c:4b:3f:d6:62:ba:c8:d5:9c:5f:5c:
5d:8b:e5:b9:7c:3e:63:5b:1d:ae:47:69:28:13:bc:
6c:b0:09:83:0d:18:aa:5a:5d:43:1f:c8:e1:11:f4:
5e:14:d0:50:2a:f4:91:4b:2f:b5:32:bb:cc:e6:58:
cf:c2:42:c0:a6:89:97:a8:8f:d1:2a:61:6e:0e:bc:
36:b3:22:34:45:08:3a:17:6d:fe:72:fb:01:1d:9e:
88:00:b9:c1:07:8e:6f:39:7f:96:b8:56:a7:16:9f:
dd:5a:e6:02:59:ea:7d:9a:bd:32:6e:0e:3f:d4:54:
ef:49:72:0a:b3:3e:12:71:f2:e9:96:89:59:de:46:
98:03:46:19:1f:5a:4e:68:fc:85:18:fb:64:3a:46:
e7:44:c1:c9:15:45:c2:e0:b7:60:c8:9d:82:cb:37:
3c:ce:7b:04:d7:bd:6e:21:cf:b4:44:fa:34:41:67:
41:c8:66:8d:99:3e:ab:8e:7c:cb:a0:5d:d3:81:0d:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:5A:E1:BF:09:1E:9C:85:7D:59:E3:CD:04:17:FC:26:97:40:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48b3c281-9f71-3fb6-acda-aef668d6d603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:42:8b:b5:9b:51:1e:7f:7c:f0:2d:ee:33:cc:f4:4b:98:78:
f6:cc:8c:fc:a5:fc:ac:85:e5:ec:bb:a1:39:86:03:24:70:30:
92:4f:fe:23:04:a7:95:0b:4f:1e:29:78:34:06:49:5b:bb:d3:
bf:2a:9e:eb:09:79:e2:b2:84:31:8a:07:4e:cb:b4:4b:bb:58:
dc:6d:9a:5f:d0:65:d3:1b:e0:f3:76:65:a0:a4:00:1c:19:bd:
31:65:00:28:85:37:fe:f2:87:ab:27:9f:19:58:10:31:d5:ba:
e6:3c:7a:2a:7b:6b:84:aa:eb:05:8f:38:9b:43:fe:bf:99:0e:
f7:2f:99:e5:45:51:fe:91:c5:25:c3:7b:42:e0:bf:6a:05:27:
41:3d:99:78:94:b4:61:f6:a5:6e:3d:ac:27:2a:a0:90:ff:97:
78:10:37:5f:70:1d:f0:dd:40:e8:ca:a1:5f:ce:1d:7b:fa:ea:
87:61:b9:ce:7e:62:8a:95:1c:c5:55:70:56:f0:68:29:f1:7f:
98:7f:47:a2:43:a3:1b:09:46:a4:03:ff:61:22:94:fd:4d:f5:
8c:f9:71:15:e6:79:f6:f9:78:11:a0:63:fa:48:8c:8d:00:89:
19:fb:d5:93:6b:90:3c:2a:6c:32:c0:19:ee:18:7e:6a:00:1e:
e2:ca:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:33 2025 by rpki-client