Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ef1923d-5160-32bf-a1bd-e94f3c26c618.roa
File: 8ef1923d-5160-32bf-a1bd-e94f3c26c618.roa (raw, json)
Hash identifier: hq5h1eb/B6k9xNVRoKwa63P1l12Re1/JcfZe/BnKjRc=
Subject key identifier: 12:60:6A:1E:7C:42:06:DC:64:79:95:B2:07:56:1C:27:68:5E:7B:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F333B51AFA7BA122CD4F91DE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ef1923d-5160-32bf-a1bd-e94f3c26c618.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:3b:51:af:a7:ba:12:2c:d4:f9:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=6f1485cc-f74a-4b41-a53c-67eb0a687a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:a5:2b:1f:f2:ef:fd:a5:1b:27:bc:a8:43:
aa:c1:9b:30:16:a8:de:ff:71:09:89:01:1b:af:d5:
09:58:cd:6c:a9:47:bb:c3:89:35:f3:66:f4:88:8d:
28:3c:ee:14:eb:89:d7:e6:f0:22:55:5d:52:fe:b8:
fe:60:3b:b9:1b:24:6a:9a:66:8f:aa:a9:87:d3:24:
6b:69:7d:63:77:66:24:fa:80:1f:aa:69:61:80:66:
c7:36:83:5a:63:d5:bf:72:cf:fe:d7:89:0e:88:74:
5e:5f:df:48:51:ae:69:b8:b0:f2:c8:eb:fb:a7:c2:
1a:06:b9:76:79:b3:41:5a:80:c6:de:8e:d8:23:ed:
86:a2:e1:45:5a:60:56:52:6a:4b:28:16:97:f4:eb:
89:32:56:0f:3f:c0:e2:ad:1e:19:04:65:e4:d6:12:
0d:b8:c0:0b:db:d5:ee:a8:46:40:8a:55:02:5a:21:
c0:58:56:b3:3d:c3:e8:91:de:c9:69:59:86:bb:ad:
e3:60:ab:5a:df:53:d9:01:9a:77:72:7f:ad:cb:c0:
bd:7b:b6:45:0f:82:36:d2:cf:ac:8f:91:97:7a:6b:
19:89:1d:d4:cb:b2:a0:fa:f7:04:8d:2e:de:10:4f:
61:1b:c6:16:d1:48:15:f5:4f:97:3c:bf:89:95:44:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:6A:1E:7C:42:06:DC:64:79:95:B2:07:56:1C:27:68:5E:7B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ef1923d-5160-32bf-a1bd-e94f3c26c618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.198.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b6:d7:cb:77:18:07:e4:8d:32:aa:37:5e:98:cd:02:52:08:
57:40:d3:5a:55:ed:e1:dd:b7:2b:0e:25:26:58:3f:47:f8:ee:
73:bc:0e:b5:f3:14:dc:75:65:65:a4:f0:03:9a:e6:9d:9e:c8:
45:8c:b8:ba:ad:8c:1e:4f:d7:4e:ed:d3:d1:42:8a:1e:1c:30:
4c:e3:df:f2:b7:a7:ea:a7:50:19:ce:58:ac:58:90:d5:9f:73:
4c:20:a8:b1:00:2c:8a:22:97:52:72:b7:48:a0:15:19:73:0f:
41:fc:ed:07:a3:59:9b:bf:0c:eb:e9:a3:a6:89:88:a7:19:78:
d5:d1:92:1b:45:10:50:b9:a1:c9:fe:5d:fd:b4:a6:af:8e:52:
bd:a3:14:24:c0:90:3d:e8:03:c2:8a:b6:d9:68:2a:1f:de:53:
5c:ad:44:92:d5:18:fb:6d:cc:ca:f1:cf:5e:fe:b5:ea:66:0f:
2f:5a:35:41:20:ec:82:75:25:98:f8:8f:2f:44:ef:fd:8d:e0:
05:c9:55:00:c1:68:e6:6e:94:ca:17:1b:54:36:7d:97:ed:10:
75:b4:04:9c:26:e3:5e:14:27:e9:e6:cc:e8:9f:b1:80:2b:62:
a7:0c:37:89:4c:48:67:71:9a:b9:4f:fe:ba:a8:7c:c0:10:a4:
d2:47:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:09 2025 by rpki-client