Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49cb9ffa-0c60-3e02-a626-888833bf2a4d.roa
File: 49cb9ffa-0c60-3e02-a626-888833bf2a4d.roa (raw, json)
Hash identifier: AwzLaVc+49QdFaDyih4ihx2DSZjOzhIdKW/qHUHLClI=
Subject key identifier: C1:87:3A:6E:C7:91:D9:0A:E6:48:01:60:41:D8:98:C4:91:5C:33:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D599135C3CC183A037B55DE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49cb9ffa-0c60-3e02-a626-888833bf2a4d.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:91:35:c3:cc:18:3a:03:7b:55:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=d62e9afa-f116-4543-ae87-9f78fb22ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:b0:ec:db:c3:62:a6:7a:51:da:19:96:47:
c0:e7:1e:39:15:a5:99:f5:ba:6c:b6:7f:b7:08:9d:
e2:a9:93:7c:c9:f2:37:ce:7a:fa:6d:9b:02:83:9c:
eb:da:bd:f5:8e:54:9a:0d:86:f0:4c:ba:5a:a6:63:
c7:0d:02:91:76:aa:b9:8f:d3:8d:69:79:8e:f7:2a:
c9:ed:04:d6:ce:32:54:b2:23:a4:d5:d2:1f:e5:72:
39:67:fc:4c:c4:5e:71:44:96:e7:ca:e4:c7:e2:6e:
83:a5:b8:dc:0a:ed:62:90:e4:f2:3c:13:5f:15:bf:
64:b8:e1:05:fa:63:e1:f1:d1:8d:ec:f9:e4:7d:6f:
31:3c:58:b3:8f:15:75:3e:93:7e:be:92:3a:42:e4:
fc:19:e8:e0:ff:c9:a8:16:84:db:7f:a1:6d:88:33:
cd:82:bf:31:06:e0:a5:2a:e0:9e:a1:6d:8d:53:58:
07:e7:30:91:35:99:98:5e:78:f1:52:c4:0e:ce:4e:
9d:4d:10:df:d2:b9:84:35:3f:72:b5:ed:8c:0d:16:
20:1e:a0:2b:bc:12:ea:58:e3:aa:af:58:cf:bc:47:
c3:87:fc:fa:8f:0e:96:bd:b8:55:50:3e:59:cb:69:
eb:19:a4:aa:e3:f4:df:95:35:4f:6e:f5:ab:ed:08:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:3A:6E:C7:91:D9:0A:E6:48:01:60:41:D8:98:C4:91:5C:33:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49cb9ffa-0c60-3e02-a626-888833bf2a4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:fe:72:03:62:2d:77:fd:bd:d4:4f:aa:63:07:26:ba:16:3a:
b8:d1:1b:83:66:f0:34:32:7f:57:ea:90:8d:19:6d:50:ae:90:
c5:93:26:49:5d:b8:60:c7:68:d0:3e:3d:4b:33:50:b6:67:44:
73:0c:06:45:82:74:06:72:bc:72:80:85:e3:99:2e:6c:f5:47:
b5:11:e2:6b:b3:0b:97:c3:67:8d:12:c2:56:69:a9:2a:45:f9:
33:68:61:87:e0:bc:81:74:21:55:fd:dc:53:36:87:50:cf:22:
41:84:92:d1:66:d3:98:7e:35:a0:c3:f1:c0:2f:b1:0c:ec:6c:
74:02:5f:e1:f6:72:9f:05:b5:a0:30:80:1f:69:fc:67:f1:03:
be:b1:67:0c:5f:3b:8f:bc:59:3c:71:b7:95:97:68:6e:b6:3c:
17:fa:89:44:dc:a9:b2:3e:d7:70:1f:6c:30:a0:77:0f:2f:ab:
26:1d:f4:e6:ed:08:21:95:a9:c5:94:73:99:13:23:1b:96:aa:
62:fc:1c:6c:2c:90:e9:bf:49:86:40:d1:6b:38:ad:be:ae:22:
21:7f:ce:fc:65:d5:96:3d:76:76:2f:43:8c:89:37:94:16:14:
93:e1:9a:3e:1c:a4:c3:56:9c:10:f3:fe:2f:4d:d0:a0:ca:e7:
75:e4:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:15 2025 by rpki-client