Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f5939f-5254-3d75-ad70-3f02585a2765.roa
File: 85f5939f-5254-3d75-ad70-3f02585a2765.roa (raw, json)
Hash identifier: NS+o2i+Ru7DBNLuTAGzHt8RP83sGJZF4xtzlTNxHft8=
Subject key identifier: 72:96:E9:F8:DF:6A:C3:B2:B4:B6:98:71:19:19:92:FD:F3:6D:C3:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8FF91746E8B2587CD027780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f5939f-5254-3d75-ad70-3f02585a2765.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:ff:91:74:6e:8b:25:87:cd:02:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=83d6fbd5-86a9-4fd1-83eb-845b360b1b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:80:fe:54:21:0c:89:40:6b:70:d2:e3:3f:
29:f8:0a:44:62:78:9d:ec:46:b0:99:29:75:27:98:
84:fb:59:7a:52:2f:b7:c9:bd:88:df:9b:80:18:df:
26:e3:ec:50:96:d5:ec:08:15:27:6f:17:5c:2f:33:
71:bf:0c:52:5e:af:0d:8b:a0:88:23:cd:bd:9e:56:
20:c3:c3:09:fa:28:ff:ea:08:48:4b:b9:cb:cb:77:
45:92:be:4c:e5:cd:52:04:af:b0:e1:79:15:91:5c:
54:21:09:cb:1e:ba:2f:ae:2f:f5:54:9b:bc:3b:be:
76:de:3c:19:ab:38:a9:52:b4:9d:82:e8:db:b7:fc:
bf:e8:b2:99:a0:ea:af:75:80:1d:a0:e6:40:16:4c:
fc:93:fe:d3:fd:64:9c:88:74:40:c2:c0:4c:ac:6e:
5b:81:df:5b:42:d3:cb:d0:30:e1:e6:94:fd:01:15:
0f:ad:c5:82:cf:c2:8c:b9:5e:12:f8:16:37:bf:2f:
80:83:85:35:81:3c:1e:c5:d3:bc:cb:55:8f:81:f1:
7a:91:62:65:07:e9:da:74:da:6f:5c:4f:10:20:4b:
32:a1:a4:50:ab:93:b1:60:0a:df:3f:9e:7d:0d:f6:
00:78:ad:1b:40:97:7c:a7:f4:f9:44:69:d7:eb:d6:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:E9:F8:DF:6A:C3:B2:B4:B6:98:71:19:19:92:FD:F3:6D:C3:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f5939f-5254-3d75-ad70-3f02585a2765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b7:f9:88:05:4d:bd:18:2d:db:80:4c:61:7c:8f:bf:55:b8:
e3:c4:6b:95:30:94:3f:52:f5:c3:49:07:96:d3:6b:2c:7a:2a:
a8:66:4c:d3:2b:fd:3a:2f:11:4e:6a:08:cc:96:7c:ed:3a:56:
a8:2d:4c:9f:25:58:00:ca:91:ec:94:94:00:0f:6a:1f:69:43:
0a:64:0d:5b:a6:a4:5a:b1:f0:66:42:77:79:d3:3b:86:2b:4a:
55:76:c9:2e:86:71:0d:3a:1f:36:aa:cd:8d:fe:9d:78:58:8c:
e8:53:dc:08:1a:7b:3b:22:bd:0e:83:ff:45:53:67:e5:be:79:
15:6b:9a:99:c5:d0:73:b3:71:b0:5d:4a:50:2e:18:41:26:ec:
17:1c:88:bc:67:17:db:42:30:46:dc:92:f3:dc:63:c9:d2:77:
3f:cf:73:b9:f6:86:b6:2e:01:93:aa:a0:d6:86:30:11:9d:cc:
08:9d:d4:e1:ef:76:0d:cd:16:51:b2:a8:b1:27:03:03:0b:96:
6c:8f:65:b1:09:fe:10:ac:86:6e:9e:16:b6:ac:bf:7e:41:51:
d0:a1:fb:e6:bc:eb:7b:4d:b4:8b:e5:d1:ac:05:12:a8:cd:75:
6a:ae:35:9f:51:33:93:65:5b:a5:86:0f:8f:cb:0c:29:a6:73:
a0:92:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:40 2025 by rpki-client