Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d7ef8f-e443-3b7a-979d-45df0342b840.roa
File: 91d7ef8f-e443-3b7a-979d-45df0342b840.roa (raw, json)
Hash identifier: 6X0aNN48zBHWvsiK6If0mDOnTL9TBLW+rMWpwFRN8sg=
Subject key identifier: 15:21:FE:2A:4B:64:85:31:D1:D0:EB:B4:B4:94:C6:A9:82:60:09:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32F0A4A92BF0761EB1206780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d7ef8f-e443-3b7a-979d-45df0342b840.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:f0:a4:a9:2b:f0:76:1e:b1:20:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=10352009-643a-49cb-8347-14a723e7b91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:4a:97:19:58:3d:64:cc:dc:0c:18:a6:c6:
5b:c5:d2:f0:b2:87:1c:02:8a:98:60:3a:f0:13:59:
18:c8:25:cb:bf:c6:9e:42:99:49:f5:69:f0:d7:e1:
96:bc:36:a2:d2:d7:c7:5c:53:83:1d:37:47:bd:78:
f0:b0:82:6c:28:f5:03:07:b2:41:59:25:8a:23:b2:
e2:61:45:c3:65:41:f5:a5:ca:17:a4:5f:a7:8a:f1:
da:24:50:ce:a6:43:4c:cc:6f:88:cb:79:8e:e8:de:
01:6f:f1:de:15:6d:24:ae:26:6a:53:74:33:cc:22:
b5:2e:99:b2:b8:cd:e2:aa:28:5d:ce:4f:cd:eb:6e:
78:32:ad:b7:c9:56:31:5e:b4:cd:44:7c:14:65:2b:
ee:f7:e4:d9:a7:cf:6c:47:b7:55:a6:00:0c:1b:be:
c8:5e:fd:0f:cc:90:a8:17:22:67:19:a3:43:1d:2b:
1f:4b:71:d1:9b:a3:c6:29:90:94:b5:77:ce:bf:32:
64:eb:76:2b:7b:ea:86:e3:19:8e:ae:92:61:69:7f:
8c:e3:67:9c:2e:59:16:25:37:b1:73:0a:50:a2:09:
f6:fb:93:38:e9:41:02:b3:94:f3:ff:af:e1:01:85:
0b:2b:41:c6:39:3b:c2:56:4b:5b:f0:22:64:80:97:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:FE:2A:4B:64:85:31:D1:D0:EB:B4:B4:94:C6:A9:82:60:09:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d7ef8f-e443-3b7a-979d-45df0342b840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ba:61:5b:55:e1:b1:8d:c1:17:5e:06:9f:0b:5f:48:41:66:
fb:dc:22:80:d2:f7:8f:88:46:82:bc:22:38:7d:f7:a9:24:bb:
d5:5d:e4:18:7a:ce:8a:93:2b:c5:c7:b9:20:71:91:3f:11:6f:
14:d8:08:11:9c:7f:a4:69:f6:89:1e:d9:6e:8f:09:37:b9:ef:
97:e9:a5:40:97:c8:58:d9:1c:c7:36:50:88:5e:8f:1a:d8:83:
5b:21:43:b9:2c:b6:90:8f:69:1e:0d:f5:62:30:83:aa:ae:21:
d1:74:c4:5f:91:ca:26:bd:08:c1:b9:a9:df:cf:75:72:d3:18:
e9:53:5a:81:ca:b5:22:b6:e1:dc:9b:ee:a2:63:19:42:76:c5:
84:1e:e4:9e:27:47:a1:8b:02:62:99:ae:ba:8b:5a:ef:86:a6:
dc:aa:c9:56:25:06:b3:73:58:62:63:d3:a3:1c:bf:06:6d:3b:
4e:09:d4:4e:7e:62:5d:07:16:eb:a5:dc:75:ff:bf:8f:cf:21:
11:48:17:11:16:39:c3:b2:4e:6b:27:94:52:96:11:87:56:42:
22:27:78:6b:ed:f8:ef:f6:bf:09:8c:49:aa:07:4b:68:53:26:
78:32:0e:f1:bb:21:a2:cf:e0:21:2a:b3:b6:87:ea:4d:e1:27:
8a:4c:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:32 2025 by rpki-client