Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7601febe-c6d4-3ce2-8e1a-3e40d38b3b2e.roa
File: 7601febe-c6d4-3ce2-8e1a-3e40d38b3b2e.roa (raw, json)
Hash identifier: 7xM1cWJa+HLmbIImrcizpyt30q4Gmg2Kgc15sOrMqNM=
Subject key identifier: 77:36:36:A1:1A:31:57:84:C9:D2:C6:BA:C5:C4:F7:1E:63:A7:14:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D36A9DFC6D685C793884600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7601febe-c6d4-3ce2-8e1a-3e40d38b3b2e.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:36:a9:df:c6:d6:85:c7:93:88:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=184807b0-1eb4-4e12-bc14-b70a227fb10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:df:98:37:29:da:3a:8d:5c:1f:d1:99:9a:
50:11:1a:90:61:56:0e:2f:26:ec:10:f6:3e:60:eb:
72:85:54:0f:ea:76:41:6b:62:2f:a7:5e:c3:14:1a:
ca:84:48:55:97:9f:5c:83:4f:57:47:3c:21:02:ca:
fe:f2:af:d1:27:e2:09:7b:aa:e0:62:e4:4c:34:92:
1c:ae:64:26:41:eb:d5:58:01:e2:17:da:b6:fe:81:
26:3a:33:3e:ea:84:ac:08:5b:52:ff:63:a7:59:57:
ac:8b:55:fc:87:cb:0b:08:53:20:a0:57:4d:16:ae:
43:68:d6:6b:d0:e5:06:d1:82:fc:20:3e:76:f2:af:
dc:27:f1:13:f8:53:e0:78:7d:36:15:c5:33:ef:fd:
9c:23:34:47:9f:cf:33:35:84:1d:46:38:c9:bb:39:
98:ae:42:2d:76:f1:36:88:44:37:d8:1a:58:7b:b9:
42:d1:bd:35:54:ab:99:32:82:12:0e:88:9e:3d:5e:
42:5b:83:a7:d1:07:28:6d:52:ad:bd:d6:23:43:fd:
03:4d:63:bc:30:31:78:af:27:c9:47:dc:5c:e2:43:
40:12:86:66:7a:03:fb:85:42:7c:cb:54:f9:7f:05:
2d:12:c8:62:59:71:ce:a3:12:c4:bb:5e:50:94:80:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:36:A1:1A:31:57:84:C9:D2:C6:BA:C5:C4:F7:1E:63:A7:14:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7601febe-c6d4-3ce2-8e1a-3e40d38b3b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:8f:67:cf:07:13:ff:37:98:ea:1a:a2:fb:37:14:f6:e6:ab:
08:e1:a2:74:15:40:6d:5a:ee:54:88:f2:01:6a:d4:27:6f:fc:
d8:56:de:7d:6e:db:cf:88:9f:fc:e8:b1:bd:7b:cb:a4:5d:52:
36:2a:a6:35:15:78:43:fd:88:cf:58:fa:77:51:66:61:b1:9e:
85:a0:1c:92:bd:86:3d:84:50:67:38:76:52:e7:40:8b:bf:17:
40:f7:02:00:40:c8:f5:0e:9b:8e:b8:09:00:f8:3d:17:87:4d:
7f:89:2a:2e:09:4b:ab:9b:92:dd:90:7b:80:75:64:b6:8c:2e:
02:a3:2b:35:af:b3:72:72:ae:bb:92:12:0d:b5:b4:fe:ae:4c:
c6:ab:d9:10:8c:04:d5:1b:b8:94:93:8a:b9:60:d3:8d:f9:9c:
e3:76:82:ed:13:fd:9b:40:74:32:4d:a7:ea:24:c6:1c:51:58:
8c:6f:92:1f:14:71:85:07:d6:b9:90:0b:f3:51:d9:67:eb:4f:
b9:60:23:87:c8:3b:43:b0:95:5f:64:a1:80:fb:3b:be:95:90:
1c:c5:b2:2f:5f:de:68:ad:2d:19:38:ce:42:1f:1e:7a:01:51:
7b:73:f2:d5:80:1d:47:ad:cb:c3:50:43:4e:32:5b:48:59:27:
97:de:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:11:38 2025 by rpki-client