Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d3a92-a2e4-3c59-806b-a10de611bdde.roa
File: 830d3a92-a2e4-3c59-806b-a10de611bdde.roa (raw, json)
Hash identifier: ayrO30jMk08E0rmYufVQhQRVM5hkqEmpUzYdstirjW4=
Subject key identifier: 0D:5B:09:8C:96:94:5B:13:66:CF:E3:C0:4C:AE:26:63:81:2D:10:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0D0C7D2736C651E521472280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d3a92-a2e4-3c59-806b-a10de611bdde.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0d:0c:7d:27:36:c6:51:e5:21:47:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=f2ee107a-1f26-4878-b334-9d25e698c6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:5b:74:9e:3d:c8:43:c0:56:7c:90:0b:14:
12:b7:2f:8e:25:bd:7c:1f:13:be:e5:da:af:90:d9:
35:12:99:c9:d6:29:47:63:3d:f9:b0:46:c1:5c:49:
c6:31:30:25:44:ca:c5:43:88:a5:53:54:65:be:84:
87:a7:8c:73:ab:88:11:de:97:3f:39:16:37:60:f7:
67:24:05:de:46:cf:70:7f:eb:d7:3c:f5:84:11:a0:
ba:21:9a:82:9a:f0:ff:c5:73:72:7b:a0:f3:34:d9:
59:ce:ec:2a:9d:5a:84:7e:aa:37:38:b9:6f:34:3c:
e6:07:fb:aa:ad:3b:44:d3:3b:db:6f:a0:08:e8:6b:
1a:4b:35:05:ef:8e:68:34:23:48:75:d8:43:3e:de:
5b:b1:0d:77:61:e8:56:5c:80:64:5c:87:04:ef:59:
66:08:e1:de:30:b9:8c:f3:bc:82:35:d5:13:af:2f:
ca:da:26:d5:3d:95:66:31:0d:d3:20:c7:c1:5e:64:
07:1a:2e:e8:4f:d8:04:89:a7:a4:cf:34:2f:d8:9e:
e5:ad:ae:8c:dc:62:af:ec:c7:45:c9:db:7a:8e:92:
e1:dc:dc:4e:8f:89:19:81:68:dd:39:50:1a:1a:4e:
0f:b1:13:87:4c:0a:94:89:1a:97:00:64:4f:24:a3:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:09:8C:96:94:5B:13:66:CF:E3:C0:4C:AE:26:63:81:2D:10:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d3a92-a2e4-3c59-806b-a10de611bdde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a9:87:c0:99:47:11:de:41:de:d9:83:41:5b:4a:b7:e6:2c:
3d:f4:9f:24:e6:80:d1:43:ab:6e:cf:19:03:f9:86:9e:ef:79:
4f:40:d9:c5:28:f7:ab:73:33:4b:29:86:27:84:42:86:e0:31:
cf:89:cf:67:79:8c:a5:0c:41:89:8a:00:ce:af:75:16:65:11:
60:be:3a:65:28:68:e4:12:f2:a2:33:2e:c1:c5:5a:50:70:3a:
a0:2a:cd:d6:96:26:e0:99:90:90:e9:87:e4:5d:b3:94:c2:9c:
a1:ae:d3:9c:2c:7d:27:6f:32:ee:45:c1:81:0f:ea:c1:2a:81:
37:59:c0:a5:c6:0f:7d:e4:67:1a:b2:ad:e2:d5:9f:62:9d:d1:
f4:4c:cf:cd:69:26:48:02:f3:f8:f9:14:fe:65:e2:fd:f2:7e:
10:fd:3a:53:08:b2:2b:d9:d9:65:24:c7:de:fc:77:b1:d1:ea:
9f:b0:4e:81:3f:87:53:36:95:78:97:e9:7d:06:3c:25:34:b4:
d6:ec:27:a9:9f:51:98:33:b1:94:92:68:28:2c:36:0d:e1:ac:
f1:75:43:73:a3:56:8b:f5:9e:6a:f4:6f:f0:cf:f5:46:01:a7:
8c:16:ee:09:db:1e:99:64:28:ee:32:5e:f4:45:42:ef:2c:64:
42:80:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:02 2025 by rpki-client