Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92f8000e-d6ad-305d-bf15-b884a7e90e0f.roa
File: 92f8000e-d6ad-305d-bf15-b884a7e90e0f.roa (raw, json)
Hash identifier: QdKtQ2ATyJfnrNla5IAa2oiyQDJQV/ITikThC47K4G8=
Subject key identifier: 3B:82:7A:2F:40:50:E3:09:2D:C2:53:68:33:12:BD:23:2E:81:C4:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D808A3285B23388B1BAFB74C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92f8000e-d6ad-305d-bf15-b884a7e90e0f.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:8a:32:85:b2:33:88:b1:ba:fb:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=b95f32ff-a09e-4fe8-a75e-39342f9b47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:53:95:c9:51:7b:6c:d2:9a:cb:43:80:4c:
b9:47:44:02:e1:60:34:a5:fc:52:0d:d9:59:ba:b8:
b9:5d:ee:04:dc:16:7d:1b:34:62:f2:b2:7e:2c:61:
e3:22:1e:f0:9f:14:b5:a8:45:91:56:e8:af:3d:9e:
09:f7:0d:4f:c2:63:80:8f:5b:16:1f:6c:e5:a3:05:
7e:87:c0:7c:7e:80:08:ff:84:5b:3f:7c:20:03:d2:
87:7e:bf:38:93:b1:28:66:7c:48:71:d0:af:4b:1a:
b5:74:05:e8:0c:41:16:96:4a:2e:97:13:25:e4:d5:
39:ce:d8:c1:f6:03:29:2b:f8:a0:dd:a4:1b:b6:31:
68:de:d0:c6:0e:db:5b:5d:ef:19:48:44:1b:3b:89:
dd:53:6b:23:c9:ac:a6:7b:78:32:72:75:cc:4e:e1:
45:55:d4:c5:13:1f:ff:fe:0e:f4:16:62:f0:d3:9c:
40:77:9e:46:2e:71:7f:0d:4a:eb:17:b7:47:34:91:
02:86:83:48:2e:ca:2d:f0:f3:66:83:04:b5:f2:77:
0f:40:79:f4:15:8e:9c:0c:6d:40:35:81:40:43:1c:
cd:bf:01:b4:49:c7:9e:99:a7:af:e7:56:8a:6c:ae:
50:74:e2:b7:1c:cf:62:93:77:e9:44:32:8d:51:ac:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:7A:2F:40:50:E3:09:2D:C2:53:68:33:12:BD:23:2E:81:C4:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92f8000e-d6ad-305d-bf15-b884a7e90e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c8:20:b7:b7:a9:f4:ff:7e:74:d1:11:38:e5:2e:90:66:26:
7a:72:63:11:b6:15:f0:39:29:81:1d:8d:b6:80:1f:b6:d9:ba:
ea:b7:82:f3:59:c3:ae:c4:c7:ca:59:6c:64:a2:31:ff:97:dd:
6e:c4:55:dc:bf:1b:79:a3:6c:61:32:9e:a7:be:34:39:ff:7e:
32:b6:ee:3e:fc:bf:4f:b4:de:eb:db:86:a6:d8:0c:99:0f:30:
03:04:c2:22:9d:c0:57:30:e3:eb:1c:aa:7b:57:a9:30:9f:ed:
2d:b8:1e:0b:23:c6:cc:f4:3c:b5:58:23:3d:b3:49:10:de:db:
c0:1e:cb:d5:7e:26:3f:86:7e:92:5b:ec:30:b9:32:b0:71:7b:
38:75:9c:a7:29:3c:9d:5d:16:e2:76:65:89:96:ec:76:4e:61:
d4:3e:0f:4b:d3:c9:62:fb:75:7d:89:a3:6b:10:12:a8:2d:60:
a0:40:bb:70:78:5e:03:0e:1c:26:b0:01:d0:47:73:3b:8d:a4:
9a:bd:05:a8:3e:ea:47:f5:ae:73:4f:b5:8b:d7:af:96:b9:fe:
d4:0a:33:2b:54:a4:ba:22:01:44:f4:77:65:89:ae:06:7c:44:
04:be:f8:95:c0:56:7e:bf:d9:8f:f4:35:3f:c3:96:d0:3e:d3:
fa:c0:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:31:07 2025 by rpki-client