Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85fac579-9f2e-3a0d-b778-ad69936915c2.roa
File: 85fac579-9f2e-3a0d-b778-ad69936915c2.roa (raw, json)
Hash identifier: LOjDg7K6atPBrKP9xDDjC8LtDBPbG4CT5BELtrO9DkE=
Subject key identifier: 64:5B:C7:2E:9F:C6:3C:E2:0D:77:58:AD:4E:E7:B0:20:CC:91:4B:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA6C4CBAE4DC572DCF2B19580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85fac579-9f2e-3a0d-b778-ad69936915c2.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a6:c4:cb:ae:4d:c5:72:dc:f2:b1:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=418ccfdf-6508-44d9-8abd-7fa4b69d5e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:e1:f0:25:50:06:fc:4f:42:ed:b4:ab:10:
e1:25:34:e3:1f:6f:0e:9b:9f:1b:5a:f4:5c:29:27:
6c:6d:b1:f4:95:ba:aa:32:c0:89:63:ee:9e:87:0b:
9c:2f:98:d2:00:17:ef:3b:51:30:cf:58:8c:36:12:
53:ba:03:6d:a3:02:c9:9c:79:65:ff:90:ee:97:13:
eb:af:6d:69:1e:4d:36:a5:02:a7:92:47:7b:53:8d:
36:95:a4:2b:4f:32:b6:c2:58:e1:95:85:c3:60:c0:
d9:b6:d0:66:a7:5a:78:47:91:48:a9:50:8a:6c:0e:
1d:bb:67:6a:e1:7f:5d:89:01:da:da:50:1f:b4:60:
a4:46:5d:c9:0a:e9:c7:18:43:ae:b7:d1:25:d1:91:
e6:9d:31:65:de:e2:d3:11:62:29:5c:6f:b7:28:c2:
6d:9d:55:57:8c:69:c2:4b:fa:d3:b2:3c:c8:f6:e0:
b8:e6:01:5c:5f:88:fb:74:8e:78:04:47:46:98:35:
9f:d1:7e:ee:f6:46:67:4a:62:3d:59:ae:6f:48:22:
14:6c:a4:dd:8f:08:5b:6b:59:a3:af:13:95:3d:cf:
41:15:28:b0:bf:70:93:f2:1b:7a:88:b4:5c:f0:7e:
62:81:66:05:24:9b:1b:e4:83:da:b3:bb:f3:ba:e9:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:C7:2E:9F:C6:3C:E2:0D:77:58:AD:4E:E7:B0:20:CC:91:4B:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85fac579-9f2e-3a0d-b778-ad69936915c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.172.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:37:53:18:17:33:44:b0:6d:ba:25:81:af:46:17:be:df:13:
c8:c3:30:8b:32:3b:a2:b6:e2:74:db:51:1d:6a:28:47:42:cb:
70:03:23:93:f2:62:36:f6:45:25:af:4f:bf:fd:7b:3d:aa:05:
b9:15:65:19:14:80:07:4c:a0:f4:8a:c2:6f:f2:7f:fe:12:6d:
20:7c:90:e1:c3:4c:93:14:3b:6c:be:6e:b8:b6:00:ea:99:d3:
e9:0b:70:ee:24:a9:b0:53:58:78:d0:dc:fc:5e:4c:6b:a6:d3:
67:75:f9:cc:c2:e5:8a:53:7d:50:9c:3c:9c:88:0a:ea:83:67:
a5:2a:2a:10:16:e8:1b:5c:12:e8:d8:7c:aa:0e:8f:ab:90:4a:
96:95:d3:aa:86:9c:da:e6:8d:38:f4:4b:ad:61:06:a4:ca:83:
1f:f7:d0:c7:d1:9c:b9:c8:48:f6:45:e1:d3:04:c6:29:a8:8b:
90:a6:fa:b6:ff:f8:06:dc:10:60:12:b5:d0:54:5c:56:cc:12:
fb:e4:1e:d6:81:3e:19:59:fa:a9:5b:73:69:84:07:65:14:a9:
8d:18:0a:bd:45:5d:b9:ae:7b:35:db:bf:ec:66:20:82:32:4a:
03:53:3d:49:4d:ea:b3:38:ec:39:11:34:61:b1:83:86:c7:56:
5e:2e:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:16 2025 by rpki-client