Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af2b14a-862f-3b21-842a-1c73f165e0c3.roa
File: 4af2b14a-862f-3b21-842a-1c73f165e0c3.roa (raw, json)
Hash identifier: j27sAnVPceTdF7+L22SF9CkF9ifoR3/LKSx8PjfteZ0=
Subject key identifier: B5:D9:00:D1:17:7F:29:78:9A:45:7A:D9:90:60:C5:CC:16:84:4A:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8236CCB2804CB1C0AF010C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af2b14a-862f-3b21-842a-1c73f165e0c3.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:36:cc:b2:80:4c:b1:c0:af:01:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=b36a338a-462b-4686-84f5-4ea1a0dc189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:9f:b1:e5:ab:02:04:35:a4:fc:2a:d6:ee:
f6:d6:67:39:5e:50:a3:69:79:8b:3c:a6:98:2d:ba:
9d:fb:0e:f2:fd:13:61:7e:85:18:f7:12:05:21:29:
94:a9:a9:ef:30:65:60:4d:ac:c6:77:43:4f:e8:da:
be:24:ee:9d:50:b0:a0:1d:25:a4:82:e1:0a:89:2f:
ef:53:73:bb:33:cf:f7:0d:a1:85:99:61:58:96:78:
a5:c3:f0:7a:e6:06:f1:81:d6:b7:69:e7:31:8c:84:
a6:55:f1:9c:c1:ed:71:84:aa:c7:84:ba:e7:70:f0:
4b:bd:b1:28:4d:72:66:0f:24:9d:87:aa:61:d2:f2:
af:63:97:67:fb:5c:b0:20:7e:4a:a9:7e:08:21:93:
ce:d5:34:3c:7a:71:0f:81:15:58:9c:e9:6f:df:fa:
7e:bf:88:d5:cc:1b:7c:ff:c3:61:f1:7a:e2:8b:5b:
a0:55:66:57:7d:c7:da:ac:11:08:c3:11:12:67:d9:
a6:97:ed:e8:a7:18:f3:73:27:28:bc:83:4b:71:92:
b8:08:34:2a:f7:b4:a9:8d:de:21:76:8d:08:3f:fd:
93:f3:cd:bd:b8:fc:05:e9:43:3a:59:bd:c7:18:42:
f4:23:fd:e9:dc:16:d2:a0:58:61:f1:3f:4d:51:7d:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:00:D1:17:7F:29:78:9A:45:7A:D9:90:60:C5:CC:16:84:4A:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af2b14a-862f-3b21-842a-1c73f165e0c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:2f:61:72:d7:64:86:be:bc:0e:ea:58:65:e6:89:63:22:6f:
c1:b3:07:b5:43:cd:82:65:af:47:f2:34:79:45:86:fe:c3:fc:
1c:b7:9c:75:b9:cd:b0:68:e5:e9:a7:d5:b6:0a:bc:0c:25:ea:
0d:6f:79:c6:a2:e8:ed:8b:d3:ec:a4:b2:c7:cc:46:dc:31:d2:
93:3e:30:4b:9d:50:80:15:60:a8:e0:fa:f4:fa:cb:15:ab:39:
8b:39:29:c7:6e:21:eb:80:aa:d7:cb:76:eb:ed:01:21:7b:bd:
27:b0:db:30:6c:54:ee:e7:07:ec:50:83:f0:95:f6:7f:ef:a2:
47:10:25:1e:ab:f0:fb:a7:46:69:37:e5:47:84:78:d0:cc:70:
fa:7d:d4:e3:48:f7:5c:bc:04:85:aa:a7:10:e0:c3:2d:68:cb:
22:fe:9d:03:44:5b:fa:97:7f:d7:5c:6b:16:8c:5d:09:2c:f9:
fc:83:9b:59:49:45:95:37:77:4f:eb:30:05:d0:6e:97:39:d1:
87:6d:f3:d7:a6:23:62:a7:0a:41:c3:92:c0:8d:3c:34:4d:92:
b9:36:98:e7:02:93:4a:73:77:f1:dd:ff:3c:50:c7:4d:b0:c8:
26:4d:ff:c8:7a:67:53:26:b5:59:01:f8:71:56:84:42:b4:ba:
49:ac:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:00 2025 by rpki-client