Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ffc9853-102b-36a9-b936-70b3820870e7.roa
File: 7ffc9853-102b-36a9-b936-70b3820870e7.roa (raw, json)
Hash identifier: 5sSBbutW61g24F6bnZygTr1iEXyEkb0kSl6X4IrCI/s=
Subject key identifier: 20:0A:EF:94:21:78:8F:ED:7B:5A:3D:EB:7B:AD:B1:42:8C:7C:14:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E97C45BB38D486E44B2776380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ffc9853-102b-36a9-b936-70b3820870e7.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:c4:5b:b3:8d:48:6e:44:b2:77:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=e101775b-197e-4004-866e-c83689d800b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:99:22:70:75:f2:fa:60:7a:43:47:cc:4d:
d4:17:da:a0:a7:7d:23:af:78:39:3d:a2:38:76:03:
67:5b:4c:33:9e:42:59:8d:1b:c9:b9:c2:20:67:90:
ad:5f:0d:23:d7:80:14:ea:e6:4f:a7:4b:4b:a1:40:
f7:01:2a:58:ed:62:ce:46:be:78:59:76:62:9f:b9:
a7:19:db:67:a6:26:9c:8c:bc:4c:5c:99:a8:e5:ee:
38:ef:d4:8f:ad:a8:c8:cd:e9:70:f8:85:53:96:90:
45:c3:0a:03:bf:4e:31:d4:22:26:36:dc:4f:c7:b8:
08:3f:81:21:ca:5a:5c:f6:5c:8d:1c:a5:44:4e:ee:
28:8e:0c:bf:61:83:b2:45:3f:eb:cc:76:f9:09:f7:
8c:3d:22:90:46:cc:b6:d3:7c:8d:38:8b:2c:51:b5:
10:f1:a7:0f:07:26:f1:71:26:62:1c:5d:53:b8:4c:
8c:93:0e:74:12:c9:d7:f5:e9:fa:13:2f:48:ee:0d:
56:cd:95:b4:6a:88:6d:48:11:54:f4:45:d0:1e:48:
86:b6:e6:dc:b0:a3:46:7c:99:e9:20:46:e6:b6:57:
a3:42:f0:a4:38:03:94:26:42:c6:20:3c:41:80:22:
4d:80:fa:27:76:c5:b7:27:39:e8:b2:07:7e:7e:3d:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:EF:94:21:78:8F:ED:7B:5A:3D:EB:7B:AD:B1:42:8C:7C:14:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ffc9853-102b-36a9-b936-70b3820870e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:32:74:e0:a1:3e:c5:93:2f:e1:1c:df:e3:ea:78:9a:0c:b4:
e4:96:8c:17:a1:d8:c4:fe:70:5b:9d:6b:4c:94:ae:0c:cd:fc:
e2:4b:18:89:61:f7:61:df:2e:63:ff:91:7c:a9:42:b6:ef:65:
b5:b2:bd:b7:a5:b3:4b:f0:2e:ae:6a:c9:f7:25:91:73:93:d2:
32:03:30:87:23:a7:1a:2d:a6:89:be:95:d8:b8:d9:e4:f3:e2:
f0:9b:94:64:af:58:87:6f:91:ba:87:59:03:5c:fb:2c:16:aa:
eb:22:0c:e2:82:c6:ee:36:0f:b4:26:55:99:35:5e:71:1b:fa:
ef:df:0b:56:ab:52:e0:15:62:f7:ce:66:14:44:92:16:db:a2:
3e:91:40:70:e9:9d:26:88:d7:49:c6:41:da:a5:af:2d:68:f1:
38:37:9f:51:44:e7:73:c8:99:a4:45:37:fb:79:57:58:bd:0f:
79:a5:e8:fd:e5:98:de:6b:fa:2f:14:ea:e4:c0:91:00:e5:7c:
95:9e:21:4a:d6:fa:b9:00:bf:f2:a5:9e:be:78:85:b4:06:3f:
7d:85:78:18:8b:9c:24:f6:b0:6b:75:ae:76:f7:db:3f:fb:cb:
a3:34:4f:fb:d4:11:f8:13:4f:d5:b8:e1:05:9a:3c:65:f4:ab:
35:04:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:20 2025 by rpki-client