Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68668575-4ae1-316a-83d6-04d6d08b2ca1.roa
File: 68668575-4ae1-316a-83d6-04d6d08b2ca1.roa (raw, json)
Hash identifier: jmB386SyU8jrd7Nx8JhQ44I+xUVlo9QNlYOc+BUbSvY=
Subject key identifier: 02:12:CA:8F:6E:DC:34:C8:5D:68:3C:F4:7C:6E:E7:77:AD:E8:25:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C960060491D26215D2B5EE980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68668575-4ae1-316a-83d6-04d6d08b2ca1.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.103.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:00:60:49:1d:26:21:5d:2b:5e:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=8475fb9b-a51b-4e27-aa3a-f411a0d1f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:4f:4e:e2:7b:fd:50:4f:0b:7f:86:39:1b:
62:18:6a:dc:2c:36:35:b0:5f:14:64:3b:36:2f:6a:
bb:4e:05:94:86:c2:56:a1:cd:a0:0a:f6:1f:1f:53:
1c:5a:7e:47:be:56:51:8f:f5:96:92:38:2a:f8:37:
9d:24:b1:2a:d0:bb:ce:63:20:88:99:ba:8c:a9:01:
44:3a:81:a9:6a:0c:54:ad:48:1a:86:d3:af:d7:c0:
c3:de:ce:9c:d1:c6:3b:20:c2:14:d2:42:c6:bd:8c:
3c:36:e8:8f:45:4b:ad:3c:87:32:11:4d:75:b7:21:
30:da:98:26:7e:fd:67:4e:b2:a1:cd:16:87:8e:4c:
a3:31:da:9f:8f:ae:67:b7:b5:23:d8:02:98:8a:36:
10:c5:94:48:fd:82:b4:6c:75:88:7c:b6:6a:7d:91:
de:5d:48:f6:be:d4:7a:71:bf:0d:19:48:6f:ed:52:
89:00:7f:e5:cc:3c:9e:34:d7:9f:8d:29:4c:25:58:
3d:54:5d:7e:ff:fe:76:57:66:ae:9f:9a:3b:a2:6f:
09:2d:b1:05:51:89:3c:da:8a:3a:49:0a:4c:61:c4:
bf:98:84:f8:a5:d9:f4:50:27:cf:d0:77:d9:e2:d3:
86:aa:d2:e2:b0:43:06:82:dd:ac:83:1a:80:31:df:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:12:CA:8F:6E:DC:34:C8:5D:68:3C:F4:7C:6E:E7:77:AD:E8:25:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68668575-4ae1-316a-83d6-04d6d08b2ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.103.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:31:36:a2:27:3c:a7:d9:38:82:e4:12:37:df:f3:d3:cc:4f:
49:12:97:51:7c:59:15:bf:03:5c:4f:f9:53:83:f3:81:bc:85:
56:63:e6:ab:a9:08:b9:cf:48:c2:29:3f:ed:af:82:4d:de:b0:
66:dc:99:e5:b9:90:f7:c1:a0:3c:7f:9c:7d:e4:e4:e1:82:ab:
a5:e9:7a:85:58:5c:39:36:5e:3d:2b:f3:f7:49:f2:3c:c0:a5:
c5:ba:55:c6:d0:e6:64:4f:d9:c4:8f:e0:49:fe:8b:47:18:7a:
85:70:a8:16:1d:e8:f1:dd:b0:98:99:67:72:dd:f3:63:df:72:
ab:98:3b:00:a6:d5:7e:de:08:fa:86:02:4a:16:48:d5:65:96:
e9:5a:d2:f7:2a:d9:a4:48:e1:3b:6b:08:cf:3a:6d:26:64:b7:
ea:4f:1e:54:51:58:ae:a8:be:8a:a0:e8:e3:05:8e:0e:b6:4e:
44:df:c3:b2:ac:35:2a:0b:da:e8:98:29:44:47:0c:dd:0a:6a:
24:c9:a1:91:56:b3:66:1a:89:1c:c4:a4:c6:07:5d:cb:dc:85:
95:29:ec:7f:2c:0a:98:26:36:4f:75:c3:0e:c9:87:06:96:5d:
6e:bd:45:45:09:e9:88:ba:fb:d4:c3:83:62:03:d8:81:1b:a9:
37:d3:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:26 2025 by rpki-client