Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84d0c8e0-4801-3b08-9133-3c7b565f9608.roa
File: 84d0c8e0-4801-3b08-9133-3c7b565f9608.roa (raw, json)
Hash identifier: JG/dsgS8TXu1P15EhdfdkDJjPChR+ffUFGLgqjglZ3s=
Subject key identifier: 98:F0:00:7B:BD:5D:D0:49:44:74:B3:D1:03:12:53:B1:D3:E5:42:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80903F937FE151FFBD241E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84d0c8e0-4801-3b08-9133-3c7b565f9608.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:90:3f:93:7f:e1:51:ff:bd:24:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=429d3121-19cf-4dda-b5cd-a4b74a82fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:eb:2b:ce:79:ff:40:b1:29:98:86:f2:d4:
ac:32:67:19:f1:42:7c:e0:e9:c1:3d:c4:3a:ef:98:
a9:e5:a7:cb:eb:9f:a5:87:2a:7d:de:17:3a:0d:ae:
18:f1:5c:b3:6b:61:d4:12:49:db:a7:47:37:d6:fe:
c5:ea:84:ce:f2:9d:b9:b0:ea:64:d0:4e:7d:16:0f:
3d:89:14:e6:d7:a6:2d:59:5c:38:5b:35:d2:58:e4:
7a:5e:f3:9b:b4:4d:13:d1:b3:49:68:ea:5c:8c:ac:
dc:24:d8:dc:12:84:a6:a0:33:b8:d4:d4:1f:51:6f:
1c:62:39:e4:9d:78:39:81:43:bd:b4:a5:07:1b:e9:
45:4e:4b:9b:96:ed:2c:d2:7b:7d:e4:62:52:f7:89:
aa:81:c9:e3:50:d1:fa:cc:44:e3:ae:8e:2a:9f:ff:
8e:d1:6d:ce:f2:6c:04:3b:cb:38:cd:75:bc:14:95:
f7:f8:f0:da:30:87:01:bc:27:ad:64:08:f3:bb:bd:
64:28:8f:7f:51:86:90:e8:11:57:f0:be:09:24:00:
2c:aa:9b:44:74:e4:27:84:ca:59:8c:64:4b:7d:bf:
33:40:aa:3c:2d:ae:ee:ad:3a:6e:d3:aa:c2:be:9f:
d4:b7:62:c1:0e:10:80:a0:e3:ee:fd:0c:28:96:0d:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:00:7B:BD:5D:D0:49:44:74:B3:D1:03:12:53:B1:D3:E5:42:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84d0c8e0-4801-3b08-9133-3c7b565f9608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:19:c1:f9:16:74:64:40:f7:e1:23:1c:c1:72:49:14:0c:ad:
34:24:2a:8f:a9:bb:c0:c6:37:1a:95:ab:52:53:12:93:f1:d9:
60:7d:16:be:8b:a0:7e:b0:3b:72:ca:f4:5c:3a:af:24:0f:94:
f9:0d:34:13:58:85:fc:a8:50:1d:45:a3:30:03:7e:54:f4:3b:
49:f6:34:81:01:6b:a4:62:e5:5e:09:ea:cf:83:3b:f1:94:4f:
2b:8d:bd:76:6f:1b:82:b4:ef:cd:bf:b4:b1:20:75:0d:e3:b8:
52:c1:b6:84:40:24:3b:f4:c1:42:36:43:ba:8e:5c:45:2e:2e:
0a:57:da:ae:f9:25:bf:47:22:78:ed:84:38:67:21:71:b7:95:
d5:9c:be:90:ef:1f:64:04:54:90:09:15:33:de:71:ae:de:02:
9a:24:66:d2:eb:13:1b:69:85:30:3d:b1:41:ae:96:df:e8:43:
77:bd:e9:0d:16:e3:a7:6e:1d:b0:46:02:b5:c7:fd:d6:ab:bc:
e6:c7:d5:9e:e5:bd:17:48:75:9e:2c:bf:d9:f6:1a:51:a3:9d:
a6:26:bf:a1:aa:64:4b:74:11:c6:60:2c:7e:50:5c:b1:af:ee:
11:9e:ff:6b:cc:88:c2:03:60:d7:7b:27:54:66:3e:ca:ea:57:
31:87:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:25:28 2025 by rpki-client