Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9bbd7e-3b2a-3d88-abb0-8d61c44b4992.roa
File: 8d9bbd7e-3b2a-3d88-abb0-8d61c44b4992.roa (raw, json)
Hash identifier: RHwdVL70QOWOk1X54JDuNZ2Sm3clE9pE+ZRpDNhukf8=
Subject key identifier: C2:D1:A6:2F:FA:D1:AF:BC:9F:36:AE:BC:2C:A4:14:63:EB:EA:CB:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9D9EE2FB8695ACDA4120740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9bbd7e-3b2a-3d88-abb0-8d61c44b4992.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:d9:ee:2f:b8:69:5a:cd:a4:12:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=94fc4e0f-5235-45b1-b8bb-0cbb8f6f0389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:40:1e:57:34:df:dc:53:63:13:da:4e:f0:
26:5c:89:ff:21:80:0b:99:e9:33:9e:e1:2c:1b:47:
d3:cb:27:6d:ad:d1:8a:ee:b4:d9:4c:2c:b7:f9:c9:
4a:65:cd:ce:86:37:11:29:14:f7:9a:11:60:13:5d:
96:d5:cc:50:cc:11:f7:ac:cf:24:8f:48:38:b8:5a:
1a:72:ba:ab:8a:a7:69:26:65:1a:e8:40:e8:cb:14:
ce:64:b6:91:c9:e7:22:31:08:23:6f:0b:07:b0:f0:
e5:5a:f6:9b:98:4f:1e:0e:41:81:83:bd:34:d0:b4:
1b:53:df:bf:bb:ed:43:e0:1b:22:62:7a:f2:14:39:
16:bc:08:27:b1:72:98:2f:40:18:02:a7:b0:9e:a2:
7f:22:91:14:70:7e:86:57:20:71:6f:46:ed:f2:42:
36:a3:16:55:ff:e7:0c:4e:c7:8a:84:62:09:2e:3e:
e6:5b:14:00:e1:fb:f9:21:72:69:e5:cf:2e:e8:bb:
fd:c6:26:80:b6:ec:27:a6:36:7b:52:e4:70:16:a8:
bb:8f:5b:06:89:30:d5:2c:af:2f:79:99:2a:58:93:
78:d0:47:c9:af:ed:e1:81:e4:8a:ea:9b:08:01:ca:
46:a8:06:2f:5f:12:49:82:a9:8f:c1:4c:27:b9:6f:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:A6:2F:FA:D1:AF:BC:9F:36:AE:BC:2C:A4:14:63:EB:EA:CB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d9bbd7e-3b2a-3d88-abb0-8d61c44b4992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:af:9d:ab:28:33:f5:93:83:1b:0a:02:1c:89:12:1e:06:dd:
23:2d:aa:5a:90:1f:24:51:a0:75:63:61:65:05:3a:34:e6:32:
bd:b0:96:74:6d:74:54:a7:5a:0b:80:ac:cc:9d:82:14:75:46:
f3:63:02:96:bf:3a:e0:a7:ea:03:f1:86:65:9d:e1:24:76:e9:
2a:cd:44:8e:e1:ee:f5:67:47:0e:ec:76:70:ff:0f:bd:5b:e1:
3f:d1:5f:e9:a8:4c:ea:92:a1:dc:02:64:46:b7:af:fb:35:5f:
ab:c3:d9:3e:70:87:2b:a4:a2:37:1d:9d:4c:7d:d1:38:02:3b:
1e:52:b6:b4:10:77:46:8a:b6:fb:fa:68:b0:bd:9d:76:09:76:
a9:f7:e1:d1:35:d6:73:09:e7:06:5e:ed:9d:61:0a:89:d8:0a:
15:08:5c:cb:75:e3:91:2f:fd:6c:fa:0b:24:78:11:98:fc:2e:
4f:91:e9:cf:cf:c9:2b:2e:a7:65:06:d2:9a:da:84:e7:94:0c:
13:d4:3a:32:26:95:16:b7:51:d6:6a:53:24:85:c2:a9:3a:fa:
d8:97:d3:09:03:6b:8d:f0:b0:03:56:af:a6:43:47:41:28:7b:
1b:b4:98:14:56:38:08:2d:44:6c:b4:ff:74:5c:70:7f:f5:1f:
0a:22:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:38 2025 by rpki-client