Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e8b902-f61d-3767-b8c4-1c682fe4d889.roa
File: 75e8b902-f61d-3767-b8c4-1c682fe4d889.roa (raw, json)
Hash identifier: ByShn7Jt78AVKSqVcCigtwPR1qzy2jADcEVJiPKU1CY=
Subject key identifier: 4C:B2:7C:F0:28:69:11:97:91:20:89:92:C3:C6:C9:2D:3C:96:D8:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32927A85A5E2BEC82D25B140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e8b902-f61d-3767-b8c4-1c682fe4d889.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:92:7a:85:a5:e2:be:c8:2d:25:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=65b0bec9-6559-4153-9d40-285b3a4f17fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:83:f2:dc:54:ff:a6:97:25:6d:5d:28:ed:
cb:67:8d:20:ec:eb:c8:49:b5:79:a2:dd:c6:55:28:
78:0f:aa:82:5d:9c:8a:46:07:b6:a8:5e:ba:86:3e:
bf:cd:6f:83:76:51:83:bb:09:0c:28:7b:5c:7a:d3:
2f:ac:02:08:bd:f6:58:9a:00:88:c7:6e:84:fd:35:
dd:43:4f:b0:dd:ef:76:1e:74:41:ca:85:92:db:8d:
52:ff:c5:27:84:8c:3c:e9:89:85:cc:53:0c:63:79:
e9:69:37:c1:85:67:c6:68:02:4f:03:f3:43:3c:7a:
dc:96:c4:ad:d4:81:2a:e7:3e:76:99:0f:3b:76:01:
b4:48:8c:e8:4c:5a:d0:54:9b:aa:71:15:59:72:c2:
4c:a9:23:b8:40:71:07:f5:bf:78:3b:29:8c:63:76:
d6:d1:09:74:26:b8:62:7a:a2:88:f4:64:8a:ee:3d:
ef:e5:81:80:b5:46:14:2a:ab:14:2e:69:72:86:1d:
cd:a9:9e:bf:63:69:24:24:c2:9a:43:b7:86:af:93:
c6:ec:02:b8:d0:a6:1c:d6:9e:df:49:a9:95:cb:75:
6e:7d:dd:69:4f:36:91:34:d9:9a:e3:fe:0f:74:b7:
f7:cb:0e:20:21:d7:25:e0:87:2e:06:eb:78:1d:cc:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:7C:F0:28:69:11:97:91:20:89:92:C3:C6:C9:2D:3C:96:D8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e8b902-f61d-3767-b8c4-1c682fe4d889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:89:00:03:80:a9:96:e6:73:ad:fc:c0:b6:9a:9c:af:06:d8:
ec:2f:4f:85:65:f5:20:f1:cf:ef:62:de:ed:f3:ed:67:5f:af:
8a:6c:61:db:92:d5:07:ad:de:12:78:4d:01:84:df:66:e7:70:
96:87:e8:3b:d0:8a:ca:47:08:7f:69:de:36:dc:f2:bc:74:bd:
da:3e:c0:fc:1a:ab:b4:c0:99:4c:26:fd:43:e0:01:1e:10:85:
c6:1b:98:49:eb:c1:7a:bc:cb:ab:36:81:d9:df:33:b9:e7:24:
b5:5c:28:eb:46:f6:ae:c1:67:89:b1:bd:51:f8:ca:dc:44:13:
c0:d6:e5:97:27:55:f3:b2:29:44:24:ce:6c:a0:f5:28:f5:06:
5b:7d:fa:f3:95:25:41:34:5e:05:c9:3f:71:ed:1d:21:a4:50:
44:5a:9d:ce:59:ec:98:fa:54:72:c4:57:81:c0:cd:cb:4b:bd:
79:8a:cc:78:5c:af:0e:ec:7f:19:3b:58:4d:e5:25:4b:31:00:
6b:0a:a9:da:b0:16:70:c9:90:88:16:02:67:d3:a4:e4:97:3f:
f1:e3:63:88:3e:70:61:69:2e:32:32:f8:0f:3c:45:64:90:17:
4a:f8:88:d4:ea:1b:b3:34:bf:0e:b2:8c:97:2c:0f:c9:49:1f:
1a:65:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:42 2025 by rpki-client