Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/788ff7ce-469d-3727-986f-3f91cf0be1bf.roa
File: 788ff7ce-469d-3727-986f-3f91cf0be1bf.roa (raw, json)
Hash identifier: XVZtOFdSa4vKsh6CpSJRocpTgUuJsTuJY4n2AMc9voc=
Subject key identifier: C0:CA:2E:EE:D5:6F:20:10:60:A1:B4:5D:90:63:97:B8:9A:31:38:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F75F11E4CB1E9AAC777FF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/788ff7ce-469d-3727-986f-3f91cf0be1bf.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:75:f1:1e:4c:b1:e9:aa:c7:77:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=e5625505-25aa-42e1-ae7b-5759fc5e66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:71:96:43:0a:b9:92:dd:73:ca:e1:cb:b3:
2c:41:f7:e0:c8:e7:d1:4c:56:e1:3c:c4:f6:77:3e:
d9:d8:6c:1b:6e:c1:90:fd:e5:14:54:d5:58:d1:e0:
1b:03:b5:46:66:b9:68:33:37:c1:87:f1:18:5a:69:
77:83:3e:ef:9c:c5:d4:f2:47:05:b6:d9:a4:ad:b5:
d3:cd:61:96:f6:10:22:6e:60:19:2f:cc:82:84:8d:
14:7e:5d:18:01:ca:24:bc:dc:b4:38:c4:b4:23:bf:
49:c2:28:70:e2:d5:c0:89:67:f9:ad:1a:ad:03:81:
73:bd:8c:0f:09:8c:a2:0e:ca:7c:54:a8:4e:25:fe:
c4:6a:11:03:e9:e7:be:f1:4d:0a:e1:46:49:20:66:
69:b5:0b:05:00:24:31:98:94:5e:e1:c5:3b:db:84:
47:11:4d:21:c6:b7:8b:d8:48:92:71:f1:a3:2f:69:
60:f2:c3:8e:c2:88:5b:86:99:cf:5e:91:62:9d:c7:
a9:a6:e1:f2:16:f7:4a:21:7c:f9:34:84:68:39:c2:
18:e8:0d:23:f2:48:6d:c4:1a:84:c6:ab:ae:1c:aa:
c0:ea:81:83:c5:65:fe:63:a5:2c:6a:1b:01:e8:a7:
36:0d:30:e2:01:85:85:cc:dd:3c:9d:d1:6a:e4:ea:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:2E:EE:D5:6F:20:10:60:A1:B4:5D:90:63:97:B8:9A:31:38:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/788ff7ce-469d-3727-986f-3f91cf0be1bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:60:73:00:0a:63:e2:7c:9a:65:37:05:86:66:dc:ee:34:58:
db:b5:d9:a1:fb:9e:4b:6f:26:bd:6f:c9:68:ac:91:6e:fb:ad:
69:1e:17:4b:ec:22:d8:00:42:50:bc:fc:f8:c8:f0:1f:90:46:
f1:9d:8b:f0:0f:e7:62:46:18:42:27:71:30:02:67:c8:25:c4:
cb:3b:6a:c6:76:61:c0:db:9a:44:50:77:1e:7b:b6:5f:17:36:
f0:df:d7:bf:91:5d:d7:03:85:2d:d8:0c:5d:a1:49:b0:2f:bc:
f3:2e:10:4c:b3:01:07:54:8c:94:64:0a:86:0c:ab:2b:fe:cd:
3a:95:09:6f:4c:8e:f3:12:13:74:c3:a0:42:08:4f:7d:d7:d6:
c8:d4:50:f6:54:bd:7d:69:af:df:b5:c7:74:9e:42:24:6b:6a:
64:21:5f:fb:65:7a:26:36:5a:a5:86:cb:ab:ed:56:7d:52:c9:
67:9e:29:9b:19:06:a5:bc:a7:63:2d:90:35:25:49:57:36:bf:
60:8c:e1:0c:1b:6c:a7:91:f4:ad:6d:4c:d5:1e:0f:14:b0:61:
60:79:a9:68:13:e4:ca:04:19:f5:2f:b5:65:92:45:e5:d8:3e:
d9:5a:bb:e6:2d:e0:ac:0a:09:da:25:8f:e1:90:58:64:c2:fd:
c5:69:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:49 2025 by rpki-client