Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a07b1a3-5e60-3412-9378-9f8b96d7388f.roa
File: 4a07b1a3-5e60-3412-9378-9f8b96d7388f.roa (raw, json)
Hash identifier: yuKApK2s9IeNExBfDu2sdAwTR9i+JK4QyMt0QnKtCHY=
Subject key identifier: D8:21:51:6A:FF:C8:6C:C4:A0:C9:42:C9:33:7A:4C:84:2C:F8:91:AF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF80C64A24DF3610A6D02C700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a07b1a3-5e60-3412-9378-9f8b96d7388f.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.88.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:0c:64:a2:4d:f3:61:0a:6d:02:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=2bbf9a23-3708-4af5-9333-d8de02b95324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:30:48:10:2d:af:42:ba:e0:ad:5c:80:76:
fb:7c:fd:32:7e:e7:b4:05:4f:04:ae:ca:3f:e6:97:
2c:77:83:f2:2a:98:92:b0:a8:ef:d6:e0:39:76:7a:
aa:f8:fe:ea:7f:50:35:52:9a:a8:75:4f:84:88:c3:
c7:95:92:87:e3:da:43:ef:75:7f:7f:20:8f:78:6c:
9c:73:54:7a:2e:ed:32:b3:db:85:cc:5a:db:d1:73:
49:3b:d3:a3:67:53:45:ab:dc:12:13:b6:4d:ef:43:
3c:9c:0a:72:19:88:af:a4:05:45:50:4b:7b:20:d0:
dd:11:a3:84:df:31:3a:18:8d:c9:3b:2b:40:26:e1:
19:fa:a1:99:cd:25:52:b4:45:66:20:65:03:11:93:
7b:a1:71:31:62:ce:96:17:9e:bd:a5:94:6f:5d:c2:
68:2c:ff:a2:6a:c4:bd:26:82:ef:3f:60:2b:c1:d7:
9f:87:7a:18:60:43:f7:96:50:96:98:45:1a:28:2d:
c2:09:ba:e2:4f:65:ce:ae:d1:85:06:69:2c:46:59:
40:c1:ae:42:fd:31:de:93:f4:35:3c:04:21:f6:01:
49:cb:7e:c1:10:95:27:6a:8c:d9:bb:38:10:3b:c7:
20:cc:f4:c0:c4:8e:2d:23:19:f9:b3:a7:eb:62:68:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:51:6A:FF:C8:6C:C4:A0:C9:42:C9:33:7A:4C:84:2C:F8:91:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a07b1a3-5e60-3412-9378-9f8b96d7388f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:90:c8:11:ff:99:aa:c4:fb:dd:94:7c:64:4c:e8:02:2e:a3:
f1:a3:47:6d:42:cb:25:77:51:66:20:bd:e2:c1:e5:38:37:16:
7d:bc:ce:bf:b9:9c:fb:c8:fc:1c:fb:9b:d5:0b:a8:ba:c0:df:
cb:3b:63:ab:89:71:43:a6:02:a6:fb:f0:c5:d0:ab:09:61:96:
d8:08:58:37:f4:9a:e8:8d:27:07:c3:bb:67:68:33:98:22:83:
54:fc:06:2b:26:22:c1:3c:93:68:82:b1:34:69:90:d1:01:2e:
50:f4:a0:0d:f6:fe:4f:8d:f3:0d:d6:a6:ac:d9:bc:38:f0:10:
64:bf:ec:1b:85:78:ab:aa:56:08:14:74:75:4b:f8:05:6f:41:
fd:cc:8f:9b:db:52:ae:66:17:1d:70:0e:b2:40:20:5f:22:1e:
a0:83:85:a7:f9:db:f6:25:fe:39:ba:97:a8:f4:ad:32:7f:15:
93:a4:3d:1d:d3:08:95:56:85:1d:b2:46:5a:f0:c4:05:2f:e6:
d0:5a:57:a6:10:e7:01:5d:1d:52:27:bf:1f:f4:38:a3:cd:5d:
7a:00:93:3a:3c:2d:25:a2:b1:ef:e6:66:82:21:07:53:21:3c:
af:95:32:cd:47:49:a1:b4:8c:e2:60:9b:df:18:f9:3d:92:54:
1d:22:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:37 2025 by rpki-client