Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/594051bb-2b3b-313d-a063-c8f9877ba03b.roa
File: 594051bb-2b3b-313d-a063-c8f9877ba03b.roa (raw, json)
Hash identifier: dr+liYlW3nbPcB+hEASO6H7kYwX+yo2RA7sU7PTwsbk=
Subject key identifier: 8C:1A:16:8A:20:DA:BA:4C:B8:82:64:7C:B8:47:F4:F7:9B:68:CF:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D324F134D7C78A52E97104680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/594051bb-2b3b-313d-a063-c8f9877ba03b.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:4f:13:4d:7c:78:a5:2e:97:10:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=f82db769-7c2b-4ccc-b245-6680861de013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:f5:dd:6e:60:df:dd:f0:74:f7:24:d0:c4:
bb:fe:e8:58:82:ad:ce:ea:81:7a:98:09:b0:f7:d0:
29:b3:3d:05:4d:23:da:9d:eb:81:da:6d:ed:4f:29:
e8:85:2b:dd:6a:ae:84:e3:af:04:ce:6b:8b:76:16:
1f:03:21:ea:ab:2c:db:08:f1:a3:2c:40:79:41:df:
25:12:12:f6:f6:88:32:9a:7f:62:14:3e:3d:04:48:
ad:59:13:05:44:d4:62:74:ca:72:57:f4:70:e5:7d:
35:f0:0a:b4:a6:16:37:e6:fb:68:43:ef:76:ef:3f:
cf:22:de:e6:3a:7e:c5:b3:d4:3c:7e:f8:c2:e5:24:
67:71:8a:c4:33:1c:83:49:72:30:7c:26:f0:b0:a0:
a2:d3:51:02:a6:c1:0d:05:72:83:59:fb:43:35:87:
9c:40:88:1a:5f:f5:1b:be:3c:5c:38:61:82:a4:d1:
28:2b:66:fe:b2:3f:85:63:19:51:36:f9:9d:24:82:
9e:1b:fd:90:89:d7:ec:af:05:30:c8:fd:be:b6:94:
bd:af:a7:f1:65:fb:29:0a:fc:28:0b:41:e1:41:76:
c9:1d:1d:1f:3a:22:37:ba:eb:8e:58:77:c4:46:c1:
d8:fa:9a:de:02:f8:e9:33:12:00:98:2f:76:69:d2:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:16:8A:20:DA:BA:4C:B8:82:64:7C:B8:47:F4:F7:9B:68:CF:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/594051bb-2b3b-313d-a063-c8f9877ba03b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:63:c2:d2:e3:51:51:97:ae:bf:b8:58:14:09:16:12:cf:df:
9d:3a:fe:03:19:8b:93:41:81:32:39:9a:f7:68:f2:02:d5:73:
f9:5d:3f:01:16:e7:73:2d:89:89:e9:c4:01:4e:04:c4:bd:8a:
e4:8c:dc:75:80:b8:b0:0a:2c:b7:18:c8:38:e8:d3:a4:65:88:
14:3a:d4:3f:47:c2:c7:4a:89:b4:f7:ec:04:1d:a8:16:3e:00:
09:a8:4c:17:08:a8:d9:71:82:c5:76:74:85:66:84:3f:d4:8e:
0e:60:8e:8e:70:c2:ca:f1:5e:9f:12:99:02:f6:87:be:cb:cd:
67:b3:74:6a:2a:b6:39:59:d0:7b:fc:c3:eb:54:54:d9:0c:4a:
e7:09:29:42:82:32:b3:1e:55:e3:af:3b:7a:1f:be:17:1d:4c:
ce:52:37:3a:e8:d1:73:a9:d0:84:64:d6:9f:3c:1f:eb:ca:1b:
36:4e:43:bc:ec:d2:1d:11:4a:2d:cc:a7:ce:eb:d5:ab:c3:46:
89:d7:43:88:5b:02:c3:c2:85:a0:a7:71:7e:38:99:8a:a5:80:
12:47:c9:71:ba:9d:57:a5:93:d6:95:ff:04:4f:a1:f2:0e:ba:
22:7d:47:71:e7:30:0b:54:53:a1:4b:1e:ec:7c:36:5d:5a:8b:
2c:c5:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:49 2025 by rpki-client