Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57b047f8-9058-3474-a484-2ff2f9c245b7.roa
File: 57b047f8-9058-3474-a484-2ff2f9c245b7.roa (raw, json)
Hash identifier: ERXCnpisn198hWsfuOMFePND3TMwP3mJcLaK+P1th10=
Subject key identifier: 58:52:2F:29:3A:00:8C:AE:2D:3E:BA:B4:DD:62:10:3A:96:DD:1B:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9797AE4A165E423F14A4FDB2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57b047f8-9058-3474-a484-2ff2f9c245b7.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:97:ae:4a:16:5e:42:3f:14:a4:fd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=d4e92cdd-114f-4715-b2c6-06f9a6196dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:f6:9e:e1:8d:2c:8a:d8:8b:74:b2:2c:00:
10:88:6b:16:22:78:e6:4f:a1:f9:0a:1f:6f:8a:6e:
0f:d6:08:40:4a:a6:0b:61:d1:5d:f8:d5:12:c2:49:
9a:3f:ff:a7:44:1e:af:6d:ec:c0:2d:a3:06:62:8c:
48:e1:92:f6:e5:23:05:4b:f9:84:46:11:b4:b1:d8:
78:eb:f1:b5:93:26:44:2f:c4:f7:04:7c:f8:da:56:
2e:d7:17:05:2e:c2:6d:ab:62:97:fc:88:f4:61:92:
97:79:36:39:8c:f4:92:0d:04:21:1c:38:ef:8b:54:
f0:f7:b0:32:24:a1:b3:f6:b3:f3:00:62:fb:a0:be:
83:83:a7:c6:dd:b1:0b:b6:01:25:8e:70:ad:62:6c:
4e:41:ae:e9:9f:1b:b3:4e:0e:0d:f2:98:ca:01:ce:
b1:89:28:cb:ed:1b:7e:0a:5a:86:a4:c2:8b:90:22:
5a:ba:94:5d:d6:10:0b:51:b1:89:f5:1b:1c:80:2d:
ec:1a:e7:6c:1a:b7:87:58:2e:65:6f:c7:81:fc:20:
4b:85:13:d5:6c:e0:29:9b:cf:a7:0b:76:76:9d:6d:
fd:6f:a3:0d:2c:ce:d1:87:1d:90:85:9f:a6:0c:ea:
5b:c4:0b:44:a9:b4:0d:93:4d:57:58:77:6e:87:12:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:2F:29:3A:00:8C:AE:2D:3E:BA:B4:DD:62:10:3A:96:DD:1B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57b047f8-9058-3474-a484-2ff2f9c245b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:07:83:b1:2d:99:b2:03:39:f5:a7:8a:cb:f8:b8:b9:e9:d7:
af:99:e8:a3:2b:61:a0:55:14:d3:a0:85:39:72:e3:45:f8:2a:
55:26:3f:00:c1:56:8d:36:f6:c1:15:08:b8:3e:22:b7:3f:75:
28:e8:6d:52:1e:af:fb:e8:9e:44:10:a0:26:a7:36:e8:63:b8:
ea:be:2a:de:f6:f8:e2:18:79:e2:89:6c:08:4d:de:09:26:36:
e9:e8:58:99:30:d6:1a:92:88:6c:b5:e2:13:27:cf:a6:95:74:
51:44:78:31:96:f0:d4:e2:65:03:2b:d4:5a:5a:af:ee:a1:80:
05:e2:22:d8:59:60:2e:ac:4f:d4:4d:ca:c3:38:84:1f:5b:ed:
38:79:82:8c:1d:8a:02:45:20:36:52:4f:ef:48:3c:32:ed:fd:
ea:51:02:5e:ad:b9:93:62:79:0b:97:c8:d9:48:b7:ce:1f:86:
ae:dc:33:aa:fc:87:84:96:76:f2:ff:1a:36:c4:ac:87:3e:64:
ef:a9:fb:9a:d5:da:d9:0b:4c:6d:1b:e3:5a:3c:a8:a0:f1:a8:
fd:82:95:16:2f:bf:b7:04:77:f1:d7:b8:03:6a:2d:c3:ea:e3:
b5:2d:2d:c2:45:ac:c2:e1:7c:ac:d9:ea:1e:2d:ec:e4:e9:d4:
34:1e:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:10:53 2025 by rpki-client