Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76c68d2f-c8a3-37c5-8f89-1a49a5515bc7.roa
File: 76c68d2f-c8a3-37c5-8f89-1a49a5515bc7.roa (raw, json)
Hash identifier: 3mZuvkLEtCjIvvn6GX4AKAeTEM5g9z+ToUUYSDXNWjU=
Subject key identifier: 74:27:49:53:77:55:2F:4B:E7:EC:4B:F8:A6:0C:87:7B:0D:B7:F8:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7CBF3B0BC5AFF22736580140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76c68d2f-c8a3-37c5-8f89-1a49a5515bc7.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:bf:3b:0b:c5:af:f2:27:36:58:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=8b2978ec-c2f0-4883-b24a-4313a8d3b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:82:c7:31:bd:0f:92:1c:ea:b9:7f:7d:82:
96:e0:22:88:b2:6f:a5:d1:30:a7:c0:36:00:d5:e9:
7a:18:dc:0c:29:57:a9:df:54:2e:57:ad:35:71:50:
24:e7:94:ad:23:f8:42:07:62:bf:a5:cc:a4:b8:d5:
0a:13:b2:a2:c0:61:bc:2b:ce:2c:d2:2d:cc:57:32:
29:f6:9d:8c:30:3f:ed:4a:27:10:84:7b:46:70:ef:
08:20:1d:d7:32:68:3e:ae:1a:7f:ad:4a:2a:f2:1b:
74:26:2b:d1:19:ee:33:70:da:de:bd:fa:b3:69:65:
d4:02:79:70:90:f9:a7:d3:e6:da:23:93:59:da:49:
0c:3a:06:54:80:00:eb:f5:83:db:cd:31:0e:7c:31:
9c:f9:da:e1:69:44:0c:68:76:a4:5f:76:92:5f:19:
61:be:cf:94:4e:e8:63:25:cf:ef:be:14:7a:08:e4:
ed:9b:5f:36:9c:ee:8c:34:9b:ef:40:ff:a1:fb:5d:
98:6d:16:d9:91:cc:68:38:b4:88:f8:a7:e4:c5:0b:
06:79:34:8f:46:96:11:b9:86:56:6c:e0:0e:fc:64:
ea:34:b4:a1:d9:4b:2e:ef:a1:b5:fc:2b:57:25:d0:
a1:fe:83:e6:de:63:85:3d:4d:7a:31:b8:8e:b3:af:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:49:53:77:55:2F:4B:E7:EC:4B:F8:A6:0C:87:7B:0D:B7:F8:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76c68d2f-c8a3-37c5-8f89-1a49a5515bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:56:ee:99:ea:22:bd:9e:d2:14:cd:da:db:a5:e6:6d:f7:3f:
53:35:89:1b:4f:be:d8:af:79:e4:b5:51:d1:e8:ef:51:2e:0f:
d1:11:c4:d2:cb:9f:f7:e4:0f:9b:8c:6e:7d:96:72:3c:d2:62:
90:88:5a:82:f6:5f:ef:cf:78:00:9a:8a:bb:bb:cb:a1:2b:66:
21:00:69:9a:f9:97:24:9f:21:37:83:60:32:30:c1:9c:3f:a1:
7d:75:f8:d6:f8:f3:6b:28:69:f0:2e:40:87:87:d7:fe:f8:37:
51:1f:6d:65:f6:2d:87:8d:73:a2:75:5a:03:fc:84:bd:cc:48:
1a:ac:23:b6:ba:c3:a4:5e:04:06:c3:67:2e:ba:8d:78:9e:53:
09:bf:79:96:b5:04:d1:65:01:6e:55:1e:94:08:37:3a:78:8c:
39:ff:dc:e4:ee:b9:31:da:79:0d:0e:f0:d3:7f:f5:b6:30:c1:
9b:72:28:4d:42:29:a2:60:d6:be:e7:b8:38:70:00:f7:9e:e6:
e6:ed:62:29:47:e1:c0:ea:ed:97:d9:74:36:3e:57:3a:8c:8a:
ad:3b:ab:56:37:d8:81:fc:da:07:16:4b:b7:ac:ca:8b:03:a7:
28:0a:97:d3:0d:b0:54:6a:51:51:3d:51:1f:18:aa:54:67:d6:
5c:87:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:09 2025 by rpki-client