Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8915cfbf-dbce-3852-95d1-6a350faaeba8.roa
File: 8915cfbf-dbce-3852-95d1-6a350faaeba8.roa (raw, json)
Hash identifier: aPym4sdkAfTDsu0INRpPRCLRrXhHLA6SkNf/m/smcAk=
Subject key identifier: 42:5D:A4:2A:34:9C:82:9D:50:BE:E5:FC:73:A7:DA:1D:97:3E:B7:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAAAA7464F7A1D8BF7F86DA78
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8915cfbf-dbce-3852-95d1-6a350faaeba8.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:aa:74:64:f7:a1:d8:bf:7f:86:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=22c59464-240a-47f8-b95b-62a8b4325532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:2b:51:28:c2:6c:ee:f8:0d:45:d9:7e:4d:
98:98:30:07:29:7a:5d:e7:13:60:a9:ca:be:7c:c1:
e9:96:d8:97:91:bc:0e:97:68:22:d4:e1:c6:c5:e0:
9e:c1:0b:26:a5:2e:3b:6e:71:00:12:9e:ad:52:ce:
bf:02:8f:bd:92:19:af:33:96:c1:25:eb:9f:42:85:
f0:06:f5:36:cb:fe:ac:f7:75:ff:7c:b9:ed:4e:8d:
ea:11:6d:37:db:b5:d7:15:48:97:00:81:5f:bd:6e:
80:d9:b0:5e:53:63:ae:3f:8c:22:2c:be:f9:9f:97:
3e:7f:5e:a5:47:a9:0d:da:28:2f:ef:db:b5:57:aa:
92:30:e0:06:14:06:1c:6f:c5:b6:9d:73:8c:bf:71:
8e:12:0e:54:23:f6:01:05:23:ce:89:62:6b:96:d6:
24:16:fd:dd:2d:ff:c7:91:c1:89:09:d9:e5:6b:b7:
49:d0:13:e5:a7:ac:09:89:4c:00:61:94:25:77:d7:
2e:94:d8:22:f3:cb:75:41:73:22:fb:cd:54:73:fc:
90:c7:34:8a:ed:23:2d:8c:39:b7:6f:a9:da:3e:fd:
2a:2f:ec:af:3f:84:2c:51:e4:e2:f7:7c:76:0b:cc:
33:8a:d9:53:2d:d7:ac:28:29:3a:cc:08:c7:cd:09:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:A4:2A:34:9C:82:9D:50:BE:E5:FC:73:A7:DA:1D:97:3E:B7:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8915cfbf-dbce-3852-95d1-6a350faaeba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b3:8d:cf:0d:11:2f:c6:d3:65:79:67:cb:11:61:7b:ae:c6:
da:66:87:32:d1:50:b0:63:77:6a:ab:6a:ea:cb:dc:c6:cf:7c:
e6:fc:77:70:2d:ba:af:40:64:0d:b3:09:55:f6:ea:f2:76:1e:
6d:5c:90:7b:51:06:af:86:14:ef:42:12:2b:36:c5:e5:81:d0:
8f:ef:ea:57:b1:e3:6b:47:7a:25:fe:13:b8:d2:25:9a:ba:6a:
1f:f7:e0:59:04:7b:fc:45:00:42:34:c5:30:b0:c9:6d:3c:ef:
1e:0c:ab:6d:eb:6a:e4:2f:59:a2:aa:f5:6e:5d:7c:45:da:2c:
6f:8c:69:b1:cd:76:a4:4f:7d:6f:02:f0:a5:40:2d:17:42:fc:
5f:83:41:d0:e9:16:bd:49:a3:90:7a:68:ff:83:17:95:37:e0:
7b:d6:40:db:be:ff:01:bc:ea:39:1b:a8:c8:ce:64:ee:14:a3:
e2:86:5c:66:bd:d8:e3:09:3b:83:26:b1:33:75:aa:33:9b:a6:
bc:ab:91:06:2f:f1:3a:c7:24:3a:22:87:56:e0:2b:a3:84:94:
f2:49:be:a6:c2:be:9e:fe:46:91:c2:b2:10:ba:51:c1:e4:0e:
79:06:71:4b:05:27:3b:2a:94:09:ef:dc:39:c8:fa:27:53:91:
42:40:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:07:59 2025 by rpki-client