Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdfe0ce-9b3c-3f43-b898-3af5c9edf82d.roa
File: 8bdfe0ce-9b3c-3f43-b898-3af5c9edf82d.roa (raw, json)
Hash identifier: 3iaDupbm8GY/SZUaVqejrhLkz8DAtv5nS0J8f/ruLL4=
Subject key identifier: F1:DC:35:11:D4:30:F4:C9:BE:43:1D:0D:93:B4:4A:25:6B:05:D2:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CF38AA520EC2E683F2C6F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdfe0ce-9b3c-3f43-b898-3af5c9edf82d.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:f3:8a:a5:20:ec:2e:68:3f:2c:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=89f6b68a-dfc9-4755-bb89-3a0b94c029e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:16:6d:84:df:dd:08:9d:26:17:b6:a0:94:
71:25:19:08:ff:c1:b9:90:c3:08:17:e8:7f:05:6c:
c8:85:78:8c:58:52:fb:5a:5b:d7:33:d9:d1:c8:3f:
37:64:09:d5:c9:ec:e4:61:d0:37:f5:37:b5:c8:35:
af:90:89:44:ca:1e:ea:ca:0f:0b:75:b9:6f:42:6c:
98:94:2e:51:39:81:98:f0:6d:d9:b8:8f:22:90:3d:
dd:18:d2:d7:aa:82:96:9d:bb:f9:66:b5:d5:c4:ec:
88:fb:a8:0f:8c:5a:fb:16:b3:49:e9:aa:bb:f1:1a:
13:03:cf:79:4b:ed:bb:67:b4:05:d4:1d:12:82:74:
61:fd:95:88:ea:66:c2:5e:f1:85:d1:d9:20:d8:5d:
ca:18:2d:96:b9:0b:6a:e3:83:7f:95:42:e9:dd:00:
fa:81:08:af:6b:29:ea:83:c1:27:ae:03:24:48:65:
f6:06:91:cd:32:e4:29:25:e9:92:48:bc:04:b2:ef:
ad:f8:c9:42:d3:1c:3a:4d:c8:99:9f:8f:18:c6:03:
c3:6f:c9:f0:7c:63:81:54:16:20:d1:ad:99:24:f9:
c4:3a:e4:1e:d2:49:07:d1:40:05:8a:f7:18:34:43:
40:b3:56:ab:1f:0b:48:7c:41:05:df:aa:8a:e9:41:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:35:11:D4:30:F4:C9:BE:43:1D:0D:93:B4:4A:25:6B:05:D2:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdfe0ce-9b3c-3f43-b898-3af5c9edf82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:7e:9d:4c:c6:7e:6b:41:b0:b5:94:49:a6:0a:0d:57:92:b9:
0c:4f:e9:76:10:8d:ce:cf:4f:e1:bf:03:d4:d9:ee:a2:57:65:
29:40:7d:23:b7:d3:5b:fc:ff:6f:96:46:3b:e4:44:38:03:f3:
a3:db:40:1c:68:17:64:0c:8f:2d:09:b0:c5:e7:66:a8:de:b3:
27:00:2e:1b:db:88:09:60:37:32:8f:87:95:71:09:0b:31:fb:
c8:ec:6a:07:71:0c:ce:93:49:4b:ff:5a:f2:c3:7f:59:45:f6:
e9:48:ad:4a:ac:d5:6c:1f:01:8d:4c:b4:c9:a7:b7:cb:e8:f9:
aa:a0:dd:b2:b2:c2:f0:da:54:79:e6:27:6d:b6:ea:a0:95:f4:
5b:f1:10:c8:83:3f:6d:ec:33:56:c3:82:5b:c3:a4:0f:ad:32:
bc:eb:3c:f5:67:36:06:92:e7:c6:cd:32:01:01:ae:1f:fc:ae:
f8:dc:4f:cb:ee:90:27:59:1e:44:90:65:ac:de:91:59:8e:bf:
e3:26:eb:90:8b:2f:18:ed:6a:74:2d:c1:7b:0d:d4:b8:8f:61:
5a:5c:d2:8f:17:d4:6b:b1:d1:e7:35:45:99:25:a2:9d:94:47:
12:a5:65:ee:15:6a:33:fb:17:62:0e:84:1a:66:3f:b4:26:7a:
8c:43:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:22 2025 by rpki-client