Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93c50bb2-7bef-313e-a4e1-f3e18917526c.roa
File: 93c50bb2-7bef-313e-a4e1-f3e18917526c.roa (raw, json)
Hash identifier: 89NXD4K+dy4/siPKVqopM6TBxE7xMgfLqPuMv+kQGLo=
Subject key identifier: 26:8C:AC:A4:9B:AC:50:D8:32:88:8B:BC:EB:E9:97:94:4D:66:0B:81
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B6DF4026E042E2F8BA83B30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93c50bb2-7bef-313e-a4e1-f3e18917526c.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:6d:f4:02:6e:04:2e:2f:8b:a8:3b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=6671071d-c818-48d1-94e4-e53a7e85b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:00:de:3d:72:3b:60:16:de:3c:f6:99:80:
b5:98:ae:36:92:92:9e:85:1e:7b:12:09:73:07:f3:
d4:9e:8e:ce:51:66:0b:9a:ed:3f:8e:98:a2:94:4a:
2d:67:74:c0:f4:39:08:0e:d9:e1:4e:33:ed:74:ed:
91:22:d3:af:32:47:2c:d1:7d:4d:37:fc:66:90:5d:
d3:e4:6b:3d:e7:31:2e:8f:88:35:23:ba:80:93:d1:
03:be:e1:c8:3c:0b:01:5b:81:42:46:0e:19:d4:ee:
4c:2a:5f:d0:a0:9f:33:fe:21:3d:92:d3:5a:0e:8d:
d3:ea:9b:8b:5c:14:6e:36:56:b9:fd:15:df:3d:54:
ad:e0:62:3a:ea:54:94:3a:88:34:eb:26:ec:8b:28:
11:3c:8f:b8:70:75:9a:9c:0d:e8:b7:76:ad:ce:b9:
be:06:7e:52:37:38:2e:88:74:1a:ce:04:63:c7:ea:
02:dd:d5:75:f9:66:8d:51:9e:46:a9:71:6d:d2:0f:
fc:47:b6:9a:b3:e5:a0:59:e1:38:18:f2:c5:a4:20:
8c:b8:21:21:58:27:91:54:51:80:43:ae:6f:0a:f0:
61:42:ee:91:48:a6:b7:08:e3:b6:45:59:c8:9b:67:
4a:83:aa:2d:6c:40:81:ac:cc:d4:44:40:cf:03:03:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:AC:A4:9B:AC:50:D8:32:88:8B:BC:EB:E9:97:94:4D:66:0B:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93c50bb2-7bef-313e-a4e1-f3e18917526c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:48:b9:c8:ef:cc:51:20:23:cf:d8:4a:05:2f:28:da:4f:26:
9a:aa:a5:d4:fc:77:9f:1e:6b:60:ba:04:65:25:b5:5d:59:9c:
ca:1c:71:dc:38:5b:b0:2d:c1:3f:f9:50:3c:c4:c7:55:85:87:
ec:31:85:6f:cc:71:4d:dd:32:fa:31:ab:3f:d5:56:8e:06:23:
37:d4:c9:e7:91:ff:7c:8f:8d:0d:a7:33:d7:f5:02:d5:bf:5a:
4c:33:d3:3d:d2:35:d7:fb:a0:25:e9:be:a9:99:0f:bf:b7:58:
a5:ce:34:bf:b7:36:00:82:1b:ea:28:97:28:f9:b8:06:4f:2f:
4d:8f:8a:bf:0d:17:ff:52:4f:83:5b:ab:38:d0:41:fc:ea:b9:
ee:5d:ef:00:49:43:e6:49:c4:d5:30:30:3c:5f:77:b5:eb:8f:
57:3c:39:74:f6:d0:89:97:bf:25:01:12:9b:69:14:ee:a6:ba:
0f:59:6b:8a:30:39:d9:e2:69:b0:19:37:1f:95:62:f3:4c:3f:
d6:05:9e:1c:96:ec:75:fd:5d:cb:79:70:ff:d2:ea:1a:4c:ef:
34:ad:68:84:e0:0f:97:be:19:b6:0b:a8:eb:d8:96:3b:be:08:
a8:f0:f9:16:b5:36:bf:62:9a:ba:0e:65:15:d2:2a:f1:f4:f6:
45:05:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:59 2025 by rpki-client