Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79f8b7f6-73fd-33b4-aad9-7b314f792e99.roa
File: 79f8b7f6-73fd-33b4-aad9-7b314f792e99.roa (raw, json)
Hash identifier: CjIi469CcY1PQ+OwNgNjo+0eGDcwtmbz/OeNVasR1Dk=
Subject key identifier: 82:85:06:F6:D6:D0:5E:28:21:82:52:18:A8:4C:B7:25:7D:03:4D:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F83C15431C88F2BF34C4D6E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79f8b7f6-73fd-33b4-aad9-7b314f792e99.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:c1:54:31:c8:8f:2b:f3:4c:4d:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=bd753fbe-54fe-451d-a7e5-74b505b197f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f2:2b:51:3f:80:d2:7d:6b:1c:69:bb:4f:9e:
41:eb:e3:8e:05:4e:5d:10:ec:c9:2d:bd:37:fd:56:
6f:b5:a1:27:e5:2b:28:cc:7b:65:20:b7:d9:1e:d6:
05:cc:1a:08:41:47:e8:c4:1a:84:35:62:f7:32:6a:
e4:4a:ae:81:fa:8c:76:34:f8:9c:f7:e6:13:89:44:
26:00:c7:01:28:53:b4:19:3a:9a:43:07:5e:fe:2e:
89:ee:9f:11:28:52:24:ac:c4:f1:ef:bc:20:0c:5b:
fd:58:e2:f6:58:c9:27:2e:0a:da:18:43:c7:3a:f8:
cb:00:dd:85:2d:9e:1b:62:97:c9:16:2a:13:dd:db:
af:90:2b:c3:5c:63:49:3c:4f:35:a8:ab:c6:cb:64:
c1:de:c6:5f:59:80:b9:d8:29:88:f9:f5:c1:b4:71:
fe:ee:cb:ca:90:fd:b8:7b:13:23:7d:06:20:cb:f7:
93:e7:8f:c9:7e:76:89:e7:c5:20:66:bd:bb:de:bb:
b6:e8:fb:4f:18:76:45:94:e1:34:5b:65:6a:ad:f2:
20:57:52:32:07:b8:21:71:3f:d8:23:6a:93:e3:dd:
b5:5e:8f:f7:8b:06:27:4c:20:d7:0d:2f:8b:f3:f6:
0c:4b:f3:0b:14:21:e3:a3:32:61:39:01:c7:d7:6f:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:06:F6:D6:D0:5E:28:21:82:52:18:A8:4C:B7:25:7D:03:4D:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79f8b7f6-73fd-33b4-aad9-7b314f792e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ea:2f:b5:83:db:c6:6d:ad:0f:67:13:04:4e:c3:77:4e:42:
97:6c:e7:6d:e1:2a:7f:47:de:d0:83:4b:ef:90:80:11:25:4a:
af:7e:98:f8:8e:4c:61:c7:3b:dc:08:e0:08:5d:d3:ce:3b:c6:
0c:74:d2:76:35:ba:43:de:1c:ab:1a:e2:6d:f7:cc:ae:80:1a:
6b:5e:72:d0:24:0f:58:3f:6a:7d:22:8a:45:d0:d7:b9:c2:28:
c3:70:1d:8d:f2:7d:f5:b0:56:17:39:d9:ba:68:e6:fe:b8:59:
f9:c8:76:16:71:e3:a0:30:cc:2c:84:52:93:55:2a:eb:6f:ee:
0d:09:5a:e8:09:2a:1c:7d:3a:32:01:16:3f:d5:92:4e:ac:a8:
a1:1b:9e:ca:5c:8e:02:e9:b2:b4:e6:16:e4:bb:d6:c7:36:ca:
7f:7d:e6:83:84:b8:95:41:e8:d7:86:d0:5f:bd:15:4a:0a:bc:
73:98:d2:9f:f0:79:88:c8:20:5f:f1:c7:87:9f:c5:1a:3d:41:
22:44:e6:f7:48:b9:d7:9d:70:1b:92:24:bf:9a:6b:26:a4:34:
71:2a:31:e6:72:ae:87:ff:3c:98:7a:b4:0c:eb:b1:bf:6c:96:
2d:ff:ea:e8:ee:ec:c6:3a:eb:0b:da:7d:5a:ba:00:4e:c8:a8:
ad:03:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:31 2025 by rpki-client