Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69558b11-37fb-3a3e-8fd5-439692164624.roa
File: 69558b11-37fb-3a3e-8fd5-439692164624.roa (raw, json)
Hash identifier: 4L4hnq0OfVoNfuSVHY2a1Ll3HiJHWKOWw6L7wSRlOQc=
Subject key identifier: BE:B9:73:18:3F:12:AD:ED:0E:45:D7:2E:54:82:85:2D:AC:E5:5B:36
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326560010083A64E163B7F34
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69558b11-37fb-3a3e-8fd5-439692164624.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:65:60:01:00:83:a6:4e:16:3b:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=4a66bf41-84f6-41db-aaef-c0f403977c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:44:5f:ed:4e:1d:42:e8:81:dd:01:9b:66:
6e:f4:28:ef:a2:8c:c0:cf:72:6f:1a:6e:99:18:be:
18:16:4d:a8:fa:d4:a2:f1:41:a7:14:28:23:f7:d4:
0f:a6:a0:7e:a6:0a:31:8c:05:fd:f8:79:b1:fa:ad:
8f:4d:12:03:0b:46:55:e3:15:5c:e7:c1:45:2a:ad:
6c:57:da:34:4b:b3:23:15:eb:51:86:5f:49:4a:4f:
83:d3:08:47:33:6c:58:a9:14:30:0d:d8:de:27:27:
70:84:ca:57:f1:83:be:25:9f:59:35:16:8d:f9:ca:
46:8a:87:51:89:b1:5a:bd:28:85:94:54:47:1b:8e:
fc:7f:00:ce:b0:99:9f:d8:95:bc:3d:80:a9:e3:25:
01:da:dc:16:1b:68:ea:d7:30:21:ec:60:89:ae:e8:
b7:50:92:ad:08:7d:4f:de:bc:bc:f5:e5:8d:1e:fe:
93:29:b2:2f:0a:b8:56:76:39:e4:f0:f6:12:86:71:
c4:d9:91:51:07:ef:dd:0d:d0:b7:46:58:d8:12:92:
f8:49:63:3d:73:25:d3:07:28:80:a0:b7:17:47:58:
00:ab:03:57:8d:e0:fd:77:b4:40:fc:65:33:7b:e0:
98:03:b0:99:ab:a0:e8:82:b2:83:e6:fd:5a:41:41:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:73:18:3F:12:AD:ED:0E:45:D7:2E:54:82:85:2D:AC:E5:5B:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69558b11-37fb-3a3e-8fd5-439692164624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:3e:a4:de:3f:01:8c:b1:24:d0:a2:a5:7f:db:9d:e5:e0:49:
14:a4:21:26:ef:76:04:38:37:a0:e4:b6:7c:30:03:bf:4f:c9:
35:af:7b:81:70:c8:9a:ed:d7:a8:90:6d:44:3a:2f:80:b8:37:
8b:69:c8:22:52:fd:ae:5a:5d:1a:3c:a7:66:c2:53:13:55:62:
17:0e:99:c9:2a:42:35:95:b1:79:bf:00:e3:91:1c:0d:e0:3b:
27:36:ae:22:db:15:8a:a1:41:e2:08:0b:67:48:ab:40:e8:88:
37:7c:22:f9:75:ee:c1:a6:b9:82:64:55:4f:05:2d:73:e5:3e:
b5:8c:8b:f2:05:f9:1e:e4:ff:8d:65:c3:55:57:e9:f9:0b:1b:
b0:19:05:9e:c9:25:6a:41:ca:9b:31:bf:3e:41:70:44:07:f2:
ee:63:5b:05:e0:5d:83:c4:ad:c6:d0:e8:10:f9:db:c4:7d:98:
6e:f9:65:9c:15:a9:49:08:0b:c3:6f:a2:55:4e:45:82:f4:86:
e9:8c:cf:03:c1:86:61:a0:f1:3e:cc:ea:e9:cc:3f:a4:44:ba:
f2:95:71:6e:33:ad:6f:92:38:34:87:4e:f6:53:9d:bb:99:3f:
35:d8:a2:98:1d:ef:b4:d9:88:b0:0c:e2:fe:54:8a:52:65:0f:
a3:5e:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:15 2025 by rpki-client