Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806937c6-418b-39ad-856e-5f57dc34b5e2.roa
File: 806937c6-418b-39ad-856e-5f57dc34b5e2.roa (raw, json)
Hash identifier: fbjLvg/q32dkfGsmn0x/3s+8quNud/XtL9+fhaa+iA4=
Subject key identifier: 90:5E:1D:8E:36:82:D0:A1:79:E1:6C:07:9B:89:06:19:A6:0B:3F:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F82B1705CFD93E14BE7E280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806937c6-418b-39ad-856e-5f57dc34b5e2.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:82:b1:70:5c:fd:93:e1:4b:e7:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=b67db45c-00fd-435a-8000-a76eb9fbf275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:cd:76:07:05:fb:01:0c:ad:fa:0e:3d:68:
af:55:38:14:c6:03:28:59:99:6e:e3:a6:95:05:69:
c2:6b:ef:6b:28:15:fa:d5:3f:79:c2:58:22:32:ef:
d3:20:b8:fc:1c:3f:58:51:c0:3b:0b:0f:52:1e:86:
94:da:b8:b5:ae:db:f9:6d:dc:ab:01:76:2f:1d:fd:
df:de:2e:e8:aa:07:40:96:cf:24:b7:87:82:c8:3f:
2e:fd:4d:ae:2d:3d:8f:e3:5c:1b:75:91:fe:53:fb:
42:6b:b8:a5:6b:e9:45:35:1a:a4:03:44:f9:6d:54:
a1:f5:c3:43:ec:1e:0d:1e:b2:ee:ae:f3:1d:61:36:
f2:73:c6:94:5e:10:c4:d3:79:37:9a:97:7d:41:4e:
81:88:4f:1b:3f:a8:05:b8:8f:0c:50:06:01:bd:16:
dd:27:cf:02:85:b3:37:13:df:63:8b:91:83:28:53:
02:68:1c:15:d3:98:e0:2d:21:3b:10:99:3e:f4:1a:
58:ac:11:4e:a1:92:ef:8f:6b:2b:7a:2b:fc:fc:32:
76:4d:2a:93:8a:59:d6:68:03:0f:89:1a:98:f6:7b:
ac:f1:0c:81:6a:ad:dc:54:63:27:7b:00:ac:df:72:
77:67:ea:84:0d:b9:e7:48:8f:5d:2a:43:59:79:a0:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:1D:8E:36:82:D0:A1:79:E1:6C:07:9B:89:06:19:A6:0B:3F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806937c6-418b-39ad-856e-5f57dc34b5e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d3:41:29:62:a6:1b:5b:da:53:e3:12:9f:29:42:61:80:50:
a7:b4:b3:01:da:d5:bd:1c:0c:93:af:9e:21:4b:d7:d2:a9:35:
84:48:08:14:ac:ce:45:3a:30:29:22:43:2e:e3:d0:19:60:82:
66:a6:fa:16:aa:13:2a:cb:32:e9:7d:5b:5b:75:a8:07:3b:6a:
95:fb:e2:7d:46:cc:06:21:58:92:0e:a5:75:85:72:4f:04:40:
ed:59:b4:83:6c:e1:3d:cd:fb:ee:ae:64:55:c4:fc:22:c5:d3:
9f:63:ea:50:92:d2:dd:59:16:38:ae:06:5f:0b:52:e9:6a:08:
75:dc:10:5a:54:59:a6:cd:80:ee:2c:31:ea:d4:38:32:e4:bb:
ed:04:b0:cc:f2:91:5d:16:3e:64:1c:45:41:19:87:98:c3:93:
64:c6:fe:80:40:31:67:46:86:a2:51:f1:f3:c7:7d:e5:3f:b6:
99:db:11:c9:8c:7b:42:57:5d:8c:a6:31:a3:1a:3d:c4:e1:e7:
d3:60:a6:6c:32:86:6b:a7:c9:58:57:d1:d8:17:10:18:97:1b:
c5:59:44:39:9e:96:d8:57:5b:f4:60:c3:2a:91:e2:99:da:2c:
b5:96:39:be:b6:a9:91:38:66:1e:09:13:05:30:83:20:0a:eb:
79:e5:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:41 2025 by rpki-client