Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87d6d27d-6904-37d7-b147-9d12da45b7d4.roa
File: 87d6d27d-6904-37d7-b147-9d12da45b7d4.roa (raw, json)
Hash identifier: MrVZBHwYhFvB6Dt6L4qC1ZsGmcbVd5L9FsgxvnEx2I4=
Subject key identifier: 8C:44:AB:20:07:6B:58:3B:50:CB:B6:C3:DF:6A:63:62:3F:65:25:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7D973032C637B870FDFC9D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87d6d27d-6904-37d7-b147-9d12da45b7d4.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:97:30:32:c6:37:b8:70:fd:fc:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=cbd8db9a-5c00-4cd8-90be-14a9a7502785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:ec:a2:53:3e:93:10:af:b0:fc:98:85:04:
0c:6f:52:86:73:ad:ce:70:df:e8:c1:de:48:58:86:
cd:61:fa:8e:9c:1e:24:4d:ab:54:31:5b:33:f1:37:
e8:85:f5:d8:4d:db:1d:be:d5:3d:e0:d6:37:ea:12:
63:22:8a:47:78:77:07:37:5c:61:a3:f4:45:3b:1b:
1a:51:fe:1b:4a:7e:0f:9a:ea:d4:a2:45:67:b3:c2:
77:46:f4:32:11:70:17:95:a6:21:5f:2f:62:63:85:
45:9b:87:1f:c5:20:f5:c4:f8:7b:18:44:b2:a8:93:
84:9b:85:50:48:73:7b:f2:f0:27:ec:80:38:80:07:
ab:da:44:d9:b4:a7:04:2f:bb:03:e4:1b:2f:09:6a:
de:8c:a5:55:68:57:b9:62:70:bb:c0:f7:5f:c8:df:
ac:44:d3:36:95:f1:5d:92:d3:a0:55:bd:ef:b1:5c:
d7:5f:b4:4d:da:cf:3b:a8:32:ba:d2:77:6a:77:5c:
b7:73:43:07:99:c8:bc:04:25:10:ea:ba:2d:47:1b:
c0:b0:1e:13:a6:2e:26:fa:60:75:43:c2:ab:34:20:
86:c4:fa:ed:bd:b9:3d:58:8e:b2:fd:f0:d4:b2:01:
59:3f:ac:34:5e:9b:d6:e6:c0:58:cf:fe:ab:c7:3f:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:AB:20:07:6B:58:3B:50:CB:B6:C3:DF:6A:63:62:3F:65:25:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87d6d27d-6904-37d7-b147-9d12da45b7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:77:e3:31:75:67:71:9d:e6:fc:93:91:64:e1:4a:da:f6:c0:
f8:bd:59:58:30:4f:df:20:46:a4:7c:b8:7b:85:30:19:6d:ef:
12:86:b2:19:27:cb:d1:08:6e:b3:28:20:a7:14:37:ea:7c:83:
bf:82:c4:ed:f7:8d:b5:ea:67:7d:ba:2b:d9:9c:02:44:9e:da:
12:6c:56:2d:b4:ca:98:3a:35:e7:2f:5a:b7:e2:cd:1a:2f:54:
21:57:7c:6a:ff:40:fc:3b:db:ed:49:6f:26:01:d3:69:c3:b6:
3c:f9:37:4f:da:c4:02:d1:64:72:c8:87:c5:1b:8f:6a:49:a1:
ed:d9:e5:ec:32:4e:78:71:f1:2d:f0:84:26:04:cf:3d:fa:d6:
97:41:f1:06:2a:ac:e0:b1:e2:e4:57:82:2d:bb:a8:c9:ab:1e:
f5:18:93:40:5d:73:0b:ab:85:02:bc:54:af:00:00:11:b5:b2:
3d:15:28:a9:5e:7f:e1:f6:7b:c4:52:20:46:2c:54:53:ee:81:
ef:c1:cf:2a:77:8f:7f:66:c1:82:19:11:57:4f:13:65:4d:88:
7b:1e:a4:45:d8:9e:e5:80:13:a7:a1:31:49:ec:3e:3d:5a:5c:
7c:80:82:aa:a2:05:bb:13:00:e0:94:39:e5:f8:44:e7:08:6c:
a1:2e:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:08 2025 by rpki-client