Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba1e4fd-676a-3869-8146-993226d4f923.roa
File: 4ba1e4fd-676a-3869-8146-993226d4f923.roa (raw, json)
Hash identifier: lSGWtj/SPIzWYHRHk1/Do608AP0mfgn67EsOL/qipFw=
Subject key identifier: AB:12:4C:4D:C5:34:9F:6C:9C:5F:4F:64:42:7A:40:D1:2C:E8:90:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE9E4E245D532310E640E280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba1e4fd-676a-3869-8146-993226d4f923.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:9e:4e:24:5d:53:23:10:e6:40:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=1d96f642-f7e2-44ef-bb39-fb97fdb57523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:b0:3f:27:0f:4e:a8:82:84:a5:45:0b:d2:
a1:dc:8e:a7:e2:e4:66:2d:18:25:40:4a:07:87:9d:
00:0e:6f:2f:07:1d:f2:ce:6a:60:79:38:f4:7e:62:
9c:e2:b5:6f:78:92:83:d7:57:4f:bb:6a:90:f0:5a:
c0:bd:4e:86:a0:3e:7f:2f:5c:0f:5b:ed:db:09:39:
55:ff:74:b3:8e:41:e4:05:21:a0:30:50:e5:e9:2f:
76:41:8a:be:3e:61:9c:78:36:19:86:60:b4:ab:7f:
c0:9d:fe:0f:d2:3c:6a:ab:92:8f:2c:f4:48:e2:ba:
fe:73:44:92:47:a1:72:56:31:75:f8:38:54:2b:6d:
ae:0f:c1:eb:18:1a:e5:ac:ba:1e:5a:d0:26:3d:38:
67:07:39:7d:a3:c1:c3:89:41:82:12:ea:35:5f:14:
f0:5e:67:4e:d3:7d:d1:f6:7a:a1:23:77:f8:10:37:
12:e5:5b:62:f2:78:eb:90:00:1a:c8:cd:8a:c7:cf:
0e:c7:4d:57:9d:a0:52:06:d8:77:63:f0:d3:86:aa:
7c:5b:1c:69:3f:57:31:b7:81:36:41:c1:b2:24:47:
f0:c5:31:5c:24:d5:74:96:e3:d5:16:ae:62:95:95:
79:d6:d5:38:5b:5c:76:b8:3b:39:2d:18:3b:31:fb:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:4C:4D:C5:34:9F:6C:9C:5F:4F:64:42:7A:40:D1:2C:E8:90:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba1e4fd-676a-3869-8146-993226d4f923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:a8:b4:08:5b:d8:52:04:3d:a8:aa:23:fe:79:52:67:35:13:
5e:6a:e1:0e:85:ce:da:83:3d:74:a9:14:ed:ea:cc:5c:3c:e1:
3b:01:14:b6:10:e2:58:6c:85:4a:2f:63:42:48:1b:4b:0f:27:
cc:17:0b:a9:be:9c:eb:38:29:8a:fb:5b:14:2e:6a:b2:87:f6:
5c:42:98:13:24:8c:b5:e4:b0:86:7a:0f:3a:f1:69:7d:e8:54:
48:a5:2d:df:82:24:82:62:99:50:0a:25:06:e6:e5:03:8a:69:
04:2f:75:64:4f:fb:e5:d5:fa:5d:34:73:08:91:a3:46:c8:24:
24:af:4f:e0:74:7e:90:6c:e7:9a:50:69:09:2c:ad:1f:3b:d0:
78:c9:85:49:d6:8b:9b:af:56:63:aa:af:37:b6:db:4b:09:15:
8d:27:98:b0:04:31:3f:8f:7c:fe:a3:34:2e:30:a9:11:a6:bb:
9d:49:e9:b4:5a:1c:44:32:b3:df:82:39:ef:fd:d1:96:dd:ef:
0b:a1:41:3f:fd:59:30:d1:11:8f:c4:91:94:90:31:d0:82:34:
bf:07:30:71:86:e5:d0:33:c7:12:35:59:f9:66:bb:e0:b7:54:
ec:66:c0:a6:3d:14:37:ba:98:02:b5:a5:f3:d5:06:72:af:a5:
c5:c1:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:49:22 2025 by rpki-client