Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8942204f-98e0-32f2-82ab-b537f4ee23d6.roa
File: 8942204f-98e0-32f2-82ab-b537f4ee23d6.roa (raw, json)
Hash identifier: rdhNWEkebDsVbOZNHeXI6XFfSdvwMGlee7jrxw3zWow=
Subject key identifier: 8B:F2:87:95:5F:3B:4D:AA:B4:0C:F3:21:9A:9E:09:CF:DF:F4:92:80
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BBD91D4F5ED502FC63E4AD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8942204f-98e0-32f2-82ab-b537f4ee23d6.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:d9:1d:4f:5e:d5:02:fc:63:e4:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=621d8a21-34e6-4f42-80c9-646ee609b6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:8a:f4:d3:ed:8c:a2:c8:fa:d4:4e:a5:e1:
a4:38:c6:24:b7:20:c7:c9:38:c5:ae:9c:f5:c6:39:
0b:3a:fd:f6:fb:9e:db:05:42:36:94:6a:6d:7f:4d:
c4:af:83:fd:ae:e3:4f:41:03:57:6f:f1:01:77:a3:
a3:93:85:b6:b4:a0:cf:d7:70:17:cf:54:b2:16:ed:
77:a0:95:e3:58:11:c2:a7:e7:43:ee:38:3d:7f:97:
aa:76:67:a2:f3:ab:46:1c:df:59:ba:c8:43:ba:8a:
33:f2:87:a1:61:5a:3b:bc:6f:ba:0d:d6:55:16:68:
f6:cb:b6:56:fd:53:6b:4e:34:e6:c9:f4:53:ea:0b:
69:c3:c0:7b:92:16:17:c9:ef:11:e1:bf:6c:b4:22:
87:49:68:93:86:c5:e1:a7:cc:3a:08:80:d2:2e:43:
5f:dc:bd:6d:af:f9:f9:3f:5a:fd:e8:9d:47:e9:59:
48:7e:a7:97:d1:20:2d:7a:a7:58:ac:0f:a8:4e:3c:
a3:2c:d7:8e:eb:15:62:fc:b4:c9:97:20:bc:44:7d:
4d:d1:00:9c:fe:f5:3e:3a:ec:e5:27:6f:a5:42:45:
bf:6c:38:8a:df:21:c8:e5:9e:e4:ca:fa:2c:d2:50:
24:c6:30:c9:2c:a5:a0:b0:9e:d2:0a:df:18:65:37:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:87:95:5F:3B:4D:AA:B4:0C:F3:21:9A:9E:09:CF:DF:F4:92:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8942204f-98e0-32f2-82ab-b537f4ee23d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:76:f0:d7:8f:f3:89:2d:d7:53:e8:c5:92:6f:76:6d:0d:59:
7b:e6:97:06:f7:18:14:a2:d4:b5:34:1c:84:fb:fd:b3:5e:2a:
6a:73:8d:e5:af:2d:e3:04:5e:4a:43:32:a1:f8:d2:d1:a7:f1:
ab:fc:fc:5c:49:3b:a0:26:52:24:2f:eb:22:5f:41:2d:31:3d:
91:cf:ae:70:ef:36:16:25:ee:e0:31:c0:39:9d:8b:50:9d:6d:
10:08:09:5b:99:e0:58:92:a5:c7:c8:dd:0f:8b:80:d2:7f:2e:
a3:1b:4f:6b:bc:b6:28:df:e8:75:be:7f:ef:1c:d9:55:70:73:
6c:21:2d:4f:ae:2c:13:48:7e:a8:1e:ab:68:0d:29:7a:ca:21:
6e:f6:4e:f7:bf:30:8c:d0:0c:4f:fe:1f:66:36:89:16:05:57:
43:aa:6a:85:e9:47:a0:3b:25:dc:85:a4:33:52:79:44:b4:4b:
f3:fe:c8:ba:c7:c4:75:61:00:72:90:4a:3c:08:1d:32:04:7a:
ba:7a:3a:4e:78:09:a7:76:42:41:3a:97:52:38:3f:30:ba:ba:
8b:1e:02:83:7a:6b:26:ef:dc:4f:70:22:e5:0c:f2:e5:cb:83:
77:94:e1:69:dc:42:13:eb:e5:9a:ea:0c:a1:07:90:8e:aa:a7:
9e:a3:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:50 2025 by rpki-client