Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/889f7970-5562-345a-a7db-eb67cb773c4b.roa
File: 889f7970-5562-345a-a7db-eb67cb773c4b.roa (raw, json)
Hash identifier: KPMAl6wdML4a8jI4Z04OQ7hmAIx3Fh3P8XBIH63J6RY=
Subject key identifier: FF:F8:6D:EE:14:8C:E9:73:C2:DC:5C:11:1C:E4:3D:70:BB:0F:7D:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA2B8CEE47652DB49C5D5B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/889f7970-5562-345a-a7db-eb67cb773c4b.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:2b:8c:ee:47:65:2d:b4:9c:5d:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=2a5b522d-40d0-4abb-b422-328c3973341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:26:50:c1:92:bb:99:07:8a:13:39:69:4a:
fd:11:61:e1:20:18:fa:8c:43:d8:30:c1:9a:77:48:
01:66:88:fb:d8:fa:dd:75:7b:82:37:e5:3e:33:a8:
35:c9:90:76:f8:ce:2f:12:9e:06:95:36:4b:24:72:
66:bc:41:20:d8:93:b7:77:7e:9d:8c:89:c1:8a:6f:
43:94:19:85:23:70:d4:4c:5c:f3:99:b0:3a:fd:b2:
fc:d6:9d:c3:da:e9:d5:c7:e9:a3:cc:7d:de:b8:b3:
92:a5:c9:f8:19:34:a1:3c:44:5e:4d:d7:dd:86:a2:
1d:1a:03:e6:52:6f:71:67:12:17:18:e3:68:2c:eb:
61:37:cc:05:8c:a0:e1:21:e0:58:73:ce:a8:53:06:
8d:a9:21:98:6b:c2:71:1b:a2:a4:fb:a4:84:75:f5:
86:09:97:4e:1b:58:81:49:f7:41:a5:d5:22:e9:14:
01:71:f8:0c:d8:b1:00:da:ca:9c:7f:20:6f:ff:53:
24:b9:a6:ef:44:d0:70:05:c6:0f:83:fe:99:94:bd:
e7:39:18:57:3c:ab:1d:5a:ea:01:28:ce:21:8b:9b:
9a:95:4e:6b:6d:a7:22:ef:b6:47:78:ac:ab:ba:4a:
7d:6c:01:42:b2:f3:4e:13:62:e9:15:1b:c3:ce:ea:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:6D:EE:14:8C:E9:73:C2:DC:5C:11:1C:E4:3D:70:BB:0F:7D:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/889f7970-5562-345a-a7db-eb67cb773c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2e:b6:af:44:ec:b4:16:c0:13:49:e1:86:54:dd:9f:26:53:
db:0f:dc:ea:11:d0:cc:34:58:1b:ae:05:c4:55:ef:70:00:bb:
bf:a6:2d:c3:5f:54:47:23:78:80:14:5e:71:49:d1:cb:97:65:
32:ab:64:c3:2e:e4:77:99:21:a4:2d:92:d8:b9:6a:73:67:30:
ed:73:2e:16:01:f6:a7:92:3c:13:1b:e6:4f:d3:75:64:3e:3a:
b4:d7:f2:9a:15:6d:8a:dc:d1:69:c4:a5:54:db:b9:83:3d:e9:
78:5d:e0:f2:bd:8a:9a:7b:54:4b:e7:c5:1c:2e:8a:43:04:53:
90:42:6c:a2:38:a4:17:c2:a9:ee:12:2a:1e:ea:7e:ad:e9:b2:
e9:45:78:25:de:53:52:4d:1b:ab:71:d6:53:be:68:df:69:9e:
ec:39:c6:54:22:e8:62:da:db:b8:de:10:74:00:27:61:20:d0:
42:04:54:d9:b7:f4:b8:13:61:94:8e:54:06:b6:6c:c9:e8:3a:
78:f5:5d:11:91:4c:1a:c0:44:01:fd:48:0c:86:03:dd:db:9b:
8d:ed:d0:65:de:c6:7d:d3:c4:e5:b1:7e:b7:9d:42:0b:a6:79:
a4:84:a4:02:4d:0a:bd:38:45:bc:1d:ec:d6:0e:f7:c7:9d:18:
25:8e:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:37 2025 by rpki-client