Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c2d7907-53b1-3f34-bf99-6f9ff28f364c.roa
File: 7c2d7907-53b1-3f34-bf99-6f9ff28f364c.roa (raw, json)
Hash identifier: CxfTMPpbtGk0VqpV6/ITXIcctULWWKKtZfCI7tS5GAQ=
Subject key identifier: 52:4D:DA:BE:54:80:EC:56:EF:39:51:B0:1D:55:55:17:D9:77:60:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8315F783E73FBFB9F20D1240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c2d7907-53b1-3f34-bf99-6f9ff28f364c.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:15:f7:83:e7:3f:bf:b9:f2:0d:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=c84eaca3-a47e-4c11-9629-5c0f78ee9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:1a:57:64:01:45:69:60:d4:cc:78:14:53:
dc:15:77:e6:87:4f:cf:db:79:04:31:b2:76:f9:47:
fb:2d:6b:f9:43:58:d8:47:66:16:d8:2b:b4:78:c9:
c1:08:b0:78:63:03:31:c9:a2:12:fd:da:cc:21:93:
0e:0c:be:63:bf:1c:86:c9:f1:e1:63:6a:eb:c2:36:
e7:18:aa:8d:80:64:c9:27:dc:5e:32:5a:91:99:4d:
94:60:77:d0:63:66:74:4a:a4:ea:c7:6b:d3:1d:a4:
93:16:c6:bc:45:bb:07:b0:83:20:e8:c8:ec:3b:a3:
8f:29:44:0e:c8:05:0e:19:7f:19:62:b6:f1:e7:e6:
d4:09:cb:64:b6:95:6d:c9:6c:b9:9c:58:a1:a3:2e:
30:9c:6f:a6:fb:4b:27:1c:f6:03:d8:da:43:44:b2:
cb:4f:b8:13:3f:4c:1c:45:09:5f:4b:be:bc:9a:3f:
ae:2d:70:bd:df:61:90:9d:04:60:f8:72:0e:aa:3c:
71:b3:b9:8c:06:52:22:07:70:58:36:70:41:e0:b7:
11:23:88:6c:c0:31:9b:1d:39:27:12:00:93:a4:4f:
85:6d:d5:27:aa:d8:b7:b1:dc:f5:7c:24:59:c3:75:
b6:7d:65:46:44:6a:10:93:85:16:c0:25:80:98:d1:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:DA:BE:54:80:EC:56:EF:39:51:B0:1D:55:55:17:D9:77:60:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c2d7907-53b1-3f34-bf99-6f9ff28f364c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:16:ec:17:72:65:7f:96:d8:a6:45:c0:f6:41:c6:ad:71:aa:
f5:91:00:64:78:e0:f3:64:13:d9:fe:4a:0d:2e:3d:c3:d1:bd:
2c:ef:45:9b:e3:c7:2a:12:b2:b8:f3:8f:be:36:86:9e:34:d0:
34:e0:41:a8:06:91:70:42:d7:2f:8f:c8:c8:e7:30:58:f0:54:
63:84:96:8a:5e:3a:69:3a:fd:2e:2f:69:b7:33:d4:a0:47:3f:
f2:0b:8d:a4:66:8b:b2:b9:ad:f6:3b:40:7b:67:d6:a0:5b:fb:
7a:68:b6:48:6a:cf:30:2a:fe:68:47:d0:f9:8e:65:33:18:fc:
df:79:3f:02:c2:65:65:95:8f:45:95:9a:73:43:c9:6b:33:43:
c4:2c:56:38:38:39:a8:77:c4:28:6a:67:86:7c:6b:1a:c9:1c:
8f:d1:cd:fc:8c:8f:ba:ec:b1:31:93:45:85:f3:ab:08:99:69:
55:5e:4e:af:d2:57:d5:3a:a1:cc:2d:67:45:30:2d:e2:3a:ae:
0c:a9:b7:50:52:ed:48:7d:76:bf:b6:ce:2f:29:1a:6a:52:0a:
b6:cb:13:d5:0e:3d:d8:80:96:8f:7a:2c:d2:ae:63:1a:82:6a:
5e:9a:aa:3f:ab:f1:fc:67:8c:2a:5a:72:35:94:f8:cb:8b:ee:
59:00:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:55 2025 by rpki-client