Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87f916db-d432-3397-bedf-450e708bfffd.roa
File: 87f916db-d432-3397-bedf-450e708bfffd.roa (raw, json)
Hash identifier: itE2BCIcLZHXoynctogwY9/bWQ3+tudUKxaJiXJFdJ4=
Subject key identifier: 9B:CE:F2:4E:0E:2B:DC:E6:48:AB:79:A8:5B:F2:44:E2:DA:FD:DA:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF2C908AE983A579D99DEFD20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87f916db-d432-3397-bedf-450e708bfffd.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:c9:08:ae:98:3a:57:9d:99:de:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=307ebdd6-0c49-4da7-8ddb-fb7f0e7946c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:48:e2:7f:43:61:f5:dd:2b:c5:38:08:7a:
72:75:86:a9:c7:6e:9e:e7:09:bf:5e:1d:97:73:cb:
e5:f1:df:48:b8:23:45:73:08:f6:db:78:14:86:12:
44:5d:d5:1a:34:19:74:93:a8:d5:a5:8c:41:ff:df:
6d:89:01:e0:72:94:bc:a9:f6:1f:1a:f0:f4:5d:cf:
4a:9e:0e:f8:bc:ef:03:90:15:44:e3:42:87:58:61:
82:ec:3f:8f:13:95:ae:0b:3e:a0:ab:be:46:b3:71:
f5:14:c0:79:63:b1:ab:d8:ba:30:50:41:7f:94:79:
86:93:c9:86:86:42:9d:02:34:b7:32:e4:31:67:09:
59:59:70:a8:45:78:f0:d6:f0:95:00:9e:e7:03:83:
a9:3d:e7:41:f2:4e:e3:21:92:74:25:b2:b9:b2:88:
03:be:cf:4f:ad:26:4b:6b:4c:b4:4b:1f:f9:2b:52:
c6:0b:cc:a6:02:67:4b:d6:22:32:40:83:2c:7d:20:
f4:e7:0c:d6:7a:37:fb:15:6b:35:ab:df:fe:8e:6a:
8a:f2:ab:ca:ac:ad:7d:8a:99:7e:d8:8d:72:ac:b0:
b3:4c:fd:05:4d:a5:9e:39:18:52:85:41:59:6c:9e:
58:f6:e0:2c:c8:cf:69:e1:8a:07:3b:47:7b:28:2c:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:F2:4E:0E:2B:DC:E6:48:AB:79:A8:5B:F2:44:E2:DA:FD:DA:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87f916db-d432-3397-bedf-450e708bfffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6e:50:08:ae:14:83:e6:82:fa:f7:3f:90:73:ed:09:6d:27:
29:a5:c9:73:a9:56:0c:da:e4:42:08:ed:d7:bc:e3:4a:e9:7c:
6b:90:2a:e0:49:58:7f:69:ad:d6:b9:cf:28:47:e9:5d:e7:7f:
ee:e4:1f:ee:be:b0:60:93:55:56:0d:35:21:37:63:7c:d5:ef:
18:6d:f1:1f:d4:e1:01:16:5f:35:7a:93:56:9f:21:8b:01:86:
26:2a:6a:2a:ee:29:47:35:a7:00:13:34:64:0a:02:cc:db:47:
2a:d2:b7:46:a7:6b:7f:8f:20:29:16:56:54:7d:93:e4:0d:6d:
c3:d0:6a:e1:1e:05:bb:6a:37:fa:22:8f:44:f0:63:56:2e:f1:
9a:b0:ba:bf:9a:ee:9f:78:81:6b:48:f0:fa:bd:16:59:c6:62:
3e:cb:00:54:9b:e6:0f:ab:8e:25:32:1f:2b:d4:99:55:3e:a6:
07:d6:a7:8b:d8:36:56:82:7b:e7:55:49:39:83:4d:14:d6:ca:
56:ae:8f:c5:b2:e5:9c:71:2e:56:f1:3c:e9:24:1e:f8:a4:f4:
eb:c9:12:c0:ea:37:96:bc:af:cb:9a:e5:8f:d1:a0:e5:4d:6c:
89:40:9b:64:dd:8b:9f:cd:3b:cf:24:4d:ee:80:90:6a:e2:72:
c1:1a:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:57 2025 by rpki-client