Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c01b2c3-1474-3cd3-9e42-de934fcbfa27.roa
File: 8c01b2c3-1474-3cd3-9e42-de934fcbfa27.roa (raw, json)
Hash identifier: TDQK9uDX0H0fGOccvvqhfXdu9RVQcf2EFiR6CR8z4FU=
Subject key identifier: 16:11:35:74:59:C1:E2:76:A8:E6:AE:1E:8E:05:DF:20:39:11:40:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A3F565A5BE8BC0259DBA480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c01b2c3-1474-3cd3-9e42-de934fcbfa27.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:3f:56:5a:5b:e8:bc:02:59:db:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=aed4567e-077d-4c86-9bcf-084119437d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:d0:77:3b:fd:c6:5f:34:e9:e7:23:f3:1a:
43:4a:97:b2:96:fa:cc:e9:11:b2:38:af:a9:6b:8a:
80:f5:5d:31:80:e2:e1:9e:0a:91:aa:df:ec:c3:24:
6e:94:12:bf:90:e8:6e:2a:52:ae:b9:a5:ba:3d:32:
e0:57:15:49:5f:3e:67:1c:1a:97:f5:e1:4d:cb:dc:
c1:94:6a:2f:cb:f4:b4:bc:13:9b:43:5d:cc:c2:d7:
f3:9c:85:f4:34:dc:56:bd:1e:62:97:e0:1b:3f:d1:
9f:7b:51:fd:82:6c:35:54:32:16:15:f1:7a:91:d2:
22:74:7e:1a:f9:27:50:a5:69:a5:56:f5:96:ec:db:
81:e2:ee:4f:27:f4:52:22:a3:8c:47:e9:46:35:0d:
3e:09:2d:3e:9a:72:1e:9d:0f:1c:c9:05:6e:f7:33:
91:90:52:c6:be:e0:b4:ee:a9:45:80:32:6e:ec:55:
91:f3:d9:af:e6:8c:f2:f7:8e:d3:42:96:30:d7:b8:
cf:9c:c3:5d:01:24:70:47:95:e3:2d:84:0a:b6:74:
65:03:73:b6:fa:5f:3f:9c:d2:83:ba:5f:bb:11:d8:
d3:8f:fd:e5:59:5e:5d:63:45:ae:6b:ce:9e:a0:8e:
aa:8d:ce:e2:0c:23:b0:81:33:bd:e9:db:8f:b9:ca:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:35:74:59:C1:E2:76:A8:E6:AE:1E:8E:05:DF:20:39:11:40:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c01b2c3-1474-3cd3-9e42-de934fcbfa27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d3:53:33:fc:37:43:ee:f0:98:a2:e8:18:61:34:d1:58:d6:
0c:78:2c:79:26:90:69:1d:ee:86:2c:c7:b0:8b:98:b1:6f:aa:
23:c8:80:aa:89:b8:cb:91:a0:dd:1e:ba:e6:9f:2a:cf:cf:cc:
1b:79:57:ab:9e:87:ec:7a:3c:5f:ab:1a:81:37:bd:cd:1a:22:
2a:5e:7f:f2:b4:bc:5c:5e:be:06:6e:47:44:ef:be:5a:f4:60:
2e:00:5d:2d:57:21:0c:27:61:e2:1e:ae:dc:79:fe:dc:30:54:
69:a9:c3:1f:bf:57:b4:83:f6:37:56:bb:be:ff:e6:e5:dd:0f:
cd:3a:3b:c8:91:e2:15:54:30:3b:65:fa:75:53:5b:10:0d:28:
59:4a:81:c4:fb:10:91:1f:b0:92:33:0b:21:93:59:84:0f:fd:
31:57:a2:a6:74:7f:de:7b:59:fe:a6:08:1e:c3:80:01:68:a3:
59:fa:c3:72:dd:64:c3:86:86:61:21:70:91:0e:26:ae:c4:2f:
66:9a:ce:68:70:28:7a:22:cc:d7:1e:c1:d1:a1:a3:a6:ef:cc:
6a:31:1a:89:ef:8a:8a:21:1a:0a:1e:47:5b:e6:ce:73:a3:92:
cc:32:d1:47:a8:5c:55:9c:a2:2d:d8:2c:53:f2:35:19:dc:4e:
f9:f9:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:48 2025 by rpki-client