Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d8c09c7-e941-300c-a106-7c935085cda9.roa
File: 8d8c09c7-e941-300c-a106-7c935085cda9.roa (raw, json)
Hash identifier: 6qNojQArgi1jQMfzdI7g2SWxYZHg0FynQl8IDolrRqw=
Subject key identifier: 28:08:B5:45:EA:50:4A:7C:80:C3:44:B8:1C:09:28:5F:3F:70:50:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE46005C6E79AF0DD98B25680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d8c09c7-e941-300c-a106-7c935085cda9.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:60:05:c6:e7:9a:f0:dd:98:b2:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=027f0070-d4a5-4a81-a1a4-bec8eb87a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:47:18:08:04:57:59:6b:cb:f1:f8:dd:41:
76:5e:02:a4:e9:42:dd:6b:4c:22:b0:9f:de:95:73:
05:19:0b:15:61:d0:67:c9:ac:ac:5d:b2:a9:1a:cd:
32:ba:ed:e4:9b:f4:71:e0:05:1a:78:14:05:c2:c7:
60:71:ae:ef:d1:90:b7:7c:55:7a:80:e6:b8:b9:43:
36:b5:96:ea:1f:ea:26:eb:f8:09:12:76:b1:63:ce:
38:cb:9b:41:48:87:d0:cf:fc:e9:03:9e:ac:a2:4e:
59:05:17:1b:64:f4:4f:55:ad:e1:aa:ce:02:e0:68:
af:55:73:62:e2:f0:13:dc:3e:ba:51:b4:49:f7:85:
ca:96:69:1e:a1:ee:af:c7:6a:d2:cf:22:49:25:31:
dc:05:f5:93:22:48:f8:fa:7c:56:20:ff:d2:4d:24:
2f:2a:9f:f9:1e:25:38:05:ed:ca:7a:be:1e:7e:2b:
9e:6b:ef:ad:0e:14:de:70:a1:d1:c3:bc:5b:c4:85:
d2:08:19:b3:76:e0:57:9a:26:e1:1c:ac:c8:3c:6c:
48:dc:37:a3:75:d9:e5:0f:86:e0:76:49:0f:20:e0:
d2:60:3c:7e:ba:14:cc:e3:8e:50:7b:d9:a2:17:a1:
d5:15:17:ab:6a:6a:14:42:ff:a1:23:46:27:4c:a2:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:B5:45:EA:50:4A:7C:80:C3:44:B8:1C:09:28:5F:3F:70:50:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d8c09c7-e941-300c-a106-7c935085cda9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:77:e4:67:28:0a:a5:2a:4c:07:02:6c:68:1d:1a:29:12:b9:
a8:df:5a:5e:af:c1:c3:50:ea:2b:c1:b0:4f:f5:d0:bc:46:6d:
db:da:29:06:a6:6b:f3:d9:cb:ee:80:62:08:ba:dd:07:38:7d:
86:91:f5:7d:a0:5d:21:fc:35:9a:26:51:af:66:93:19:e4:82:
65:aa:f9:99:96:a5:b8:dc:07:db:89:82:9e:00:d6:7c:1e:9e:
43:9a:9d:51:5c:98:84:58:ad:89:49:16:22:1a:bf:8f:e9:55:
08:c3:46:21:cc:45:de:c2:4f:42:7d:0a:63:ee:55:f8:0c:4a:
05:b0:24:2d:a4:6b:e6:a8:32:dd:06:f7:f5:bf:f5:27:18:96:
86:8a:d2:71:94:6e:57:ec:63:55:52:9f:c3:4e:09:e7:43:09:
73:82:ec:d3:80:82:d5:e0:7c:9d:64:28:47:b7:af:d0:03:a7:
ff:6e:ff:89:94:31:78:0d:af:e5:95:f9:0a:2b:b2:f7:c8:85:
df:17:80:ac:96:7b:6e:60:28:52:7c:c3:bd:81:b4:7f:1b:3c:
3e:ab:a2:e4:ea:cd:c7:14:00:1e:76:a3:4c:54:28:64:b9:ed:
16:d3:bd:44:fe:2c:ec:38:07:86:11:36:e0:ce:0c:3f:68:dc:
fb:d9:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:07 2025 by rpki-client