Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bb03eca-de19-30c0-ac1b-8a848ef6163d.roa
File: 7bb03eca-de19-30c0-ac1b-8a848ef6163d.roa (raw, json)
Hash identifier: sp6O72ZPtmigZCtJ29QTk384E37jUJwE8ZccZddHXGc=
Subject key identifier: F4:E5:9D:8B:26:D8:2E:6A:C2:A1:FA:28:1F:E2:39:4D:76:66:0F:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D595CE4B78F8D409BA40A9A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bb03eca-de19-30c0-ac1b-8a848ef6163d.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:5c:e4:b7:8f:8d:40:9b:a4:0a:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=175c884f-fb49-46b8-bd4f-b2e7b19beb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:f8:2e:00:47:39:03:ae:f9:67:9b:7b:b1:
ba:73:bc:05:aa:71:80:ee:72:6c:66:41:f0:93:fd:
3a:ea:3c:87:84:53:96:d2:dc:36:53:57:b1:57:05:
66:95:74:1e:e4:c1:ad:ad:b1:b1:88:e7:d1:cc:10:
0a:ce:ac:38:37:94:31:43:76:54:9b:5b:f0:0e:f1:
9f:a5:74:a7:ee:7d:a9:67:99:27:b0:b6:e7:18:40:
f1:61:ce:28:af:cc:76:43:ed:c3:2a:d7:13:58:2e:
0c:7a:bf:09:51:8f:03:fe:40:4c:3d:77:54:b5:45:
72:ab:c5:67:57:19:1d:08:df:1b:fe:3c:08:37:89:
6c:ee:3a:c8:df:c3:1d:d8:4e:5e:06:1a:16:0b:c9:
14:9c:f4:34:d8:c9:4d:8a:29:55:71:30:9f:1e:73:
1d:8c:e0:93:b6:93:a4:d7:83:62:62:4c:03:0c:d1:
22:78:59:30:23:40:1e:77:06:da:d4:d0:ad:34:a6:
76:5f:81:ea:21:10:94:76:e1:3c:8d:d8:07:74:19:
81:f3:4c:92:b6:72:cf:1d:b0:24:44:2a:e2:77:09:
c4:58:7a:69:63:f4:4f:b7:6b:1d:25:93:8b:a2:e3:
42:04:e6:dc:2e:f8:1b:16:7f:72:2e:56:ac:01:6c:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:9D:8B:26:D8:2E:6A:C2:A1:FA:28:1F:E2:39:4D:76:66:0F:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bb03eca-de19-30c0-ac1b-8a848ef6163d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:89:81:08:4d:2d:e2:6a:c7:a7:1f:6a:21:21:f8:f3:d9:6e:
b8:10:54:b2:52:02:86:77:31:04:20:79:41:c8:30:8c:62:7e:
a2:0d:a3:bc:4e:10:3c:12:6c:2d:dc:d3:0e:7a:41:ea:1d:21:
32:70:d0:1c:08:4a:dd:e2:47:ae:6b:8c:d8:ce:a7:c6:8c:9e:
b2:0d:f3:f8:9e:b3:03:3f:f8:c9:18:6b:77:db:79:5f:53:9d:
74:43:c0:b2:af:46:4e:00:8c:2c:19:37:72:0b:e4:bd:bf:5e:
ce:7c:74:fa:1d:08:62:3f:99:09:43:ca:c9:21:56:8f:f5:ca:
60:8b:67:8f:55:48:3e:ea:e6:d8:3f:99:8a:c1:ab:60:cc:00:
32:fc:88:2e:31:9e:1c:e4:83:a5:7b:44:d8:f3:45:73:9e:ea:
c8:b1:e6:88:16:5c:90:1e:00:ff:48:cc:f9:e6:02:a5:c1:28:
51:34:c3:b1:1b:46:43:54:61:f9:10:d6:be:c7:62:a0:ee:84:
c2:ef:86:e8:8e:5a:97:85:50:d5:a8:06:70:5a:96:ff:ba:78:
31:ee:9b:19:57:c7:55:1a:9b:41:29:2f:6d:26:b8:bd:af:63:
d9:0b:a0:05:ce:90:c7:4b:0f:1b:fe:31:89:30:a4:67:7f:64:
c4:e7:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:42 2025 by rpki-client