Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880e0252-1367-358b-9274-edc8f0b21f7e.roa
File: 880e0252-1367-358b-9274-edc8f0b21f7e.roa (raw, json)
Hash identifier: VoOTbvgFk0IFKzUrWJhvyp9xCJxA4F6tNXI9CVLC8SE=
Subject key identifier: D0:BB:A7:F0:42:28:BB:EE:E0:C7:C8:6E:07:5A:DC:95:0A:C2:EB:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD310D56F674CB0ABD5A1F19C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880e0252-1367-358b-9274-edc8f0b21f7e.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:10:d5:6f:67:4c:b0:ab:d5:a1:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=95a9cc7d-50be-4e16-b1c8-763a5e4096bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:e0:c7:4f:20:b6:7e:05:2d:c7:96:d1:34:
b6:52:09:bf:e6:0c:2c:83:72:86:9a:02:8a:45:3e:
d6:4d:20:90:b2:c4:d5:86:de:76:e9:85:ba:43:af:
5f:5f:25:e0:02:13:3c:fa:ce:44:c5:53:0a:74:2c:
93:2b:4d:6f:3e:03:a1:ed:be:a3:af:2b:f6:08:03:
81:74:71:7d:49:5c:51:dc:75:31:2c:8d:61:3c:b4:
3d:2c:13:b9:5f:25:82:0d:85:6f:6b:65:ee:98:e3:
f4:6e:64:8e:e1:bc:57:9f:92:02:6d:22:15:71:4f:
18:fb:3d:a8:db:19:17:26:09:88:ad:31:71:6a:54:
85:f6:f5:72:6f:0d:61:35:ff:a4:43:a8:6c:db:1d:
3c:86:bc:fc:a4:26:80:72:dc:b4:46:8a:cc:c0:ee:
10:39:fb:6b:87:05:ed:39:fc:a8:1e:37:06:3d:7f:
3b:19:e2:a7:ed:2c:74:b1:69:51:b2:c7:9e:16:3c:
3c:d4:b6:20:1b:c4:71:96:d1:b9:dd:8d:20:5e:35:
02:fa:d3:ab:8f:57:35:4e:f6:7f:9c:38:fd:1a:5f:
4b:0a:35:23:8b:19:3d:f9:63:cf:0f:84:e0:68:df:
f0:21:0d:49:27:4e:e3:e7:c9:57:3e:2c:4f:b6:af:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:A7:F0:42:28:BB:EE:E0:C7:C8:6E:07:5A:DC:95:0A:C2:EB:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880e0252-1367-358b-9274-edc8f0b21f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:de:7d:a3:2c:a9:71:e7:d6:ba:54:70:21:04:f7:f1:65:24:
20:f5:46:17:76:3b:ec:9e:22:88:66:6a:6e:44:8b:fc:b0:da:
69:c0:62:60:aa:5a:d5:53:c0:c8:08:8d:c0:0f:6a:c1:52:00:
d9:c5:93:54:e3:eb:a3:6f:68:21:33:8f:31:fa:02:d9:1a:d6:
8e:36:7b:72:76:46:9b:ae:a3:fd:39:1a:3e:7d:8c:11:75:55:
6e:31:73:ba:19:2b:20:06:06:66:ce:31:f4:4b:68:fb:04:dc:
98:9a:fa:30:21:55:f1:79:ba:26:00:92:11:7f:b8:dd:a6:cf:
2d:5d:a3:24:eb:b6:d8:13:91:3a:f9:ca:75:67:07:cf:82:74:
9e:e3:3f:5e:dd:0a:23:94:cd:f8:f4:44:ba:25:ed:0c:68:e8:
64:68:bf:0e:39:34:71:87:09:a7:de:d4:f0:26:7a:aa:e5:31:
c2:68:91:6a:3a:16:1e:a2:4c:6b:98:06:80:c4:44:6d:a4:9c:
c3:ac:76:c5:ff:44:c0:94:a4:79:0b:2f:67:13:76:c6:0a:a2:
d7:a9:c6:8a:35:e0:13:3e:1b:82:3a:17:06:c0:a6:ce:d1:f0:
34:c6:dd:3e:02:db:73:4d:12:ff:35:31:00:d2:41:9a:85:1c:
f4:c9:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:17 2025 by rpki-client