Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e9130e8-837a-3e49-86c2-f3736987636d.roa
File: 7e9130e8-837a-3e49-86c2-f3736987636d.roa (raw, json)
Hash identifier: qRJooPgmXe1Ud67tKiIZ8VhNyYuZyU+JVggeNziOyHs=
Subject key identifier: C2:FB:CF:37:18:78:C2:B6:61:98:11:76:AD:51:52:B1:B7:26:50:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE0DFE4DE737536A577392A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e9130e8-837a-3e49-86c2-f3736987636d.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e0:df:e4:de:73:75:36:a5:77:39:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=d5280811-df05-49d2-b643-5a57e7fcc438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:d4:50:68:97:aa:f2:bc:e2:eb:72:b0:61:
4d:67:0b:33:27:cc:70:8f:01:96:ff:06:bd:ee:38:
75:fc:91:6b:96:47:e5:88:f0:8c:e0:bc:69:d0:c8:
be:28:8f:03:b2:6e:f4:62:62:31:eb:a4:f2:7e:9c:
2c:5b:be:8a:66:a0:01:80:49:d6:8a:f6:c9:28:31:
81:1e:33:88:de:6f:70:70:15:7d:ac:75:38:d7:f1:
56:ec:90:b2:eb:77:b6:24:e0:d3:f5:df:08:b8:41:
43:63:2e:db:73:22:21:64:cc:22:df:22:95:e7:7b:
7a:d5:e6:e5:72:9a:c8:62:f0:0c:39:df:41:0d:65:
75:5b:82:92:bb:f5:12:8c:50:73:6a:a0:74:47:55:
87:c4:fa:20:3b:b5:d6:1e:e7:8d:fe:c3:94:e1:cb:
dc:fc:ce:a7:54:e2:d1:22:58:12:11:1a:75:5d:87:
91:53:f8:04:e3:23:6a:91:7a:ea:74:3c:bf:c0:94:
33:da:69:83:05:42:5b:8b:36:95:b9:db:94:4a:0c:
af:8c:8b:e4:fe:72:16:8e:b8:62:87:7c:1c:d4:48:
4a:d0:29:75:27:7a:76:36:c2:07:63:45:0e:b0:08:
d1:8a:54:26:9e:2d:61:a5:65:c2:14:1d:22:5a:88:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:CF:37:18:78:C2:B6:61:98:11:76:AD:51:52:B1:B7:26:50:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e9130e8-837a-3e49-86c2-f3736987636d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:07:c8:ce:b7:39:b1:e1:de:73:49:db:09:86:2d:77:25:fe:
5d:22:b2:76:98:c4:4c:da:1b:09:f9:b6:da:38:ca:a7:40:75:
46:d5:0f:98:87:fc:fe:2e:ee:f7:32:15:2e:3c:b7:b1:b5:88:
21:25:ec:a9:c9:06:9f:7b:6e:52:56:b0:09:44:05:d5:52:f6:
cd:d0:2f:97:b2:1b:39:3f:64:1c:19:87:3f:aa:fd:27:6c:98:
b1:8a:1a:2f:4b:c7:f9:c1:53:49:5d:9c:32:58:3d:fd:13:9d:
88:3f:34:56:81:ef:0d:19:87:87:16:7a:2a:e0:85:cb:57:29:
7e:a4:69:a7:6c:61:28:8f:45:b1:a5:f0:d7:da:74:0b:ca:d2:
f6:3d:18:c2:f0:72:30:81:99:ed:2e:35:19:ab:eb:4b:85:28:
7e:72:74:dd:86:d1:81:de:b6:f7:d9:f9:0d:7a:4e:ad:69:4f:
bd:1c:ae:b4:c8:13:b5:c4:d5:fe:94:b3:14:b8:1f:36:ef:37:
05:bd:a2:e8:4b:88:16:02:6e:a9:4c:1d:f3:8a:68:dc:7c:b7:
89:46:2b:41:1e:4c:7e:50:8f:4e:ce:9f:fc:3d:fc:a6:f1:3f:
0c:a7:f4:9f:e4:11:a0:6e:82:c0:cd:69:5e:e8:f4:d6:e9:90:
fb:9f:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:09 2025 by rpki-client