Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa40a65-f4d4-3f36-9fcc-11a02c313905.roa
File: 8fa40a65-f4d4-3f36-9fcc-11a02c313905.roa (raw, json)
Hash identifier: BtjCnlpjUtPKrLSK26yyWcWm1jgIk/0GxHVGkNIkgP0=
Subject key identifier: 0F:9A:9A:3C:9F:63:CB:AF:24:16:81:85:86:49:A5:A6:23:A6:9A:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95E288AC55C27A2A9602A280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa40a65-f4d4-3f36-9fcc-11a02c313905.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:e2:88:ac:55:c2:7a:2a:96:02:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=7e22006e-c88a-46c7-aabb-3296b7392ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:8f:86:f7:45:f9:ea:e3:88:e8:cb:7b:72:
ec:fa:d5:eb:4c:00:e8:90:0b:b4:7d:ca:12:92:30:
e7:e9:e3:5b:03:9b:a6:d5:b6:24:94:d6:41:63:02:
a6:ad:14:07:4a:f8:64:38:4f:63:db:83:1a:51:2d:
d6:9f:68:1b:32:f8:6c:29:33:97:57:8f:72:89:f6:
8f:b3:0a:33:ff:12:b2:98:e4:f9:5f:3f:65:b6:b9:
13:af:1d:5e:41:fe:bd:8d:2d:a5:27:af:9b:86:0e:
75:6a:d1:de:37:51:19:33:75:40:10:da:40:c5:94:
30:f5:6d:a7:e1:4e:d5:6e:d0:f4:c4:cd:f4:b1:8d:
a7:04:1a:c9:a2:41:bc:c5:4d:30:18:e3:95:d8:1e:
15:09:5b:a9:e3:43:7e:26:80:18:40:74:6d:64:db:
9c:fd:20:df:19:1d:5d:b6:a1:5e:6f:73:8f:7b:7f:
32:1a:b5:50:b9:56:60:a3:49:f1:a3:1c:ac:a8:c2:
3b:92:cb:08:47:0e:96:28:20:a3:0c:e5:91:ad:15:
07:6a:72:e1:05:2c:7c:2a:95:34:bb:c6:44:bf:ce:
38:9d:44:d0:ad:27:42:06:09:5d:40:e9:63:53:9c:
12:42:81:c8:97:96:f8:8b:be:10:52:4d:4d:0a:d0:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:9A:3C:9F:63:CB:AF:24:16:81:85:86:49:A5:A6:23:A6:9A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fa40a65-f4d4-3f36-9fcc-11a02c313905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:61:80:48:8f:aa:9a:80:35:b6:89:2f:4b:04:7b:62:01:fc:
a9:11:50:18:ef:22:ad:50:bf:f9:38:93:32:46:30:94:c4:69:
07:65:e8:2d:a2:65:e3:f9:8d:76:f2:83:d6:b4:8d:ff:13:e4:
cd:61:4c:06:5b:a7:3c:f5:ca:57:6e:c4:2f:db:f5:80:9a:36:
1a:0e:53:a3:c5:d4:73:f7:db:a1:5c:94:93:8e:8c:0c:5a:13:
06:4a:30:fa:b1:53:d4:0a:67:37:2b:c9:06:7c:91:ab:de:ab:
f7:09:c4:70:b7:62:3c:a4:b3:d0:fd:1e:0f:a0:94:5a:7c:77:
a0:a7:68:3c:15:b1:3d:9d:dc:ec:44:fd:3b:e8:67:96:66:f2:
4c:8c:b9:cb:3f:18:ca:fa:1b:c0:ad:f8:f2:71:2a:cf:77:e8:
2d:19:14:70:2b:31:f6:8e:69:4a:7b:a4:d0:25:15:0f:ac:dc:
53:0a:18:fb:fb:c0:15:c4:b1:d2:0f:d5:89:26:c8:1e:16:2b:
5f:e9:43:eb:7e:b9:7c:df:71:43:0c:b9:12:eb:3d:75:ff:f6:
f1:50:6a:f1:70:e4:00:79:aa:59:24:8f:72:13:7b:36:70:3a:
e4:15:42:be:6a:18:53:a1:e4:e9:16:26:8b:37:cc:90:53:0a:
d4:3f:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:10 2025 by rpki-client