Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944ea3fa-db21-3264-80e6-8125debf1b68.roa
File: 944ea3fa-db21-3264-80e6-8125debf1b68.roa (raw, json)
Hash identifier: DJNAmQnisWJp721HjtLZfxwDLljo6lKpz3eMdqiSYgE=
Subject key identifier: 8C:C6:D0:26:F1:75:A3:C9:24:A9:A1:FB:D6:88:50:36:E3:92:81:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A89F5DFDACB18280C6526F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944ea3fa-db21-3264-80e6-8125debf1b68.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:89:f5:df:da:cb:18:28:0c:65:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=6a90c755-e449-4a00-9a3b-58e9323e3395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:29:2c:80:18:95:08:37:47:da:d0:46:c2:
2e:31:2e:ea:dd:2b:b2:2e:ae:3e:e0:4a:26:61:fc:
98:71:81:1c:f2:7c:d8:d9:0d:d8:01:ea:a1:98:78:
1b:a3:f5:25:30:e8:1d:59:27:93:d9:77:3c:78:32:
bd:bd:c0:cd:f1:a5:45:a3:f1:e7:63:38:50:76:b1:
63:e0:7f:84:29:88:32:d1:f2:be:c2:de:b9:c0:f8:
74:01:93:bd:19:5c:a2:b5:2a:83:87:3f:49:c7:33:
07:b0:9f:5a:73:93:8b:9e:34:3c:31:dd:af:28:b8:
01:ec:10:bb:d7:d9:96:01:4f:75:6a:5d:7f:46:fe:
8b:7b:8a:7d:77:dd:2b:fa:52:a9:73:4f:36:e0:d2:
bd:1d:fd:63:f8:39:76:2f:3d:d5:d5:2f:2e:7e:27:
f5:d8:65:9b:e4:1d:aa:d5:59:89:db:05:3f:5f:2d:
d4:32:61:97:df:5a:ab:37:fd:56:61:8a:3a:25:53:
f2:2f:43:e6:c4:c6:d4:f8:3d:b7:09:2b:49:f2:44:
ab:0b:63:41:ab:b9:1c:c4:72:b5:b9:8b:f5:c2:f7:
3c:4a:38:0d:37:15:7f:22:94:41:48:54:a7:29:40:
98:74:ad:da:4a:9f:d6:d5:29:76:17:cd:c1:e9:d6:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:D0:26:F1:75:A3:C9:24:A9:A1:FB:D6:88:50:36:E3:92:81:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944ea3fa-db21-3264-80e6-8125debf1b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:0a:b2:b7:0a:b0:bd:70:de:aa:4e:0f:c5:99:eb:25:e8:45:
f5:7c:77:a8:dc:64:2e:13:45:c1:f8:41:4f:f9:41:b8:df:8f:
03:68:f9:63:bd:b2:61:0d:07:a4:33:eb:2d:46:11:96:87:b8:
8f:9e:3f:d2:b8:5b:e7:49:8d:fa:72:4f:9d:9d:78:b3:8a:f6:
72:a0:a1:c6:94:d8:7a:f5:e3:f7:c6:81:d5:b3:85:2f:5d:04:
22:40:34:d8:83:c4:7e:92:cf:ed:74:d4:1e:0d:59:97:ac:34:
63:56:3d:32:9f:5d:8c:9c:89:d3:4e:36:96:9a:7f:db:69:a6:
8b:32:d8:4d:68:87:2f:72:0e:91:d7:5c:37:bb:e8:ef:a9:1c:
b6:cd:01:9e:8b:d6:49:c8:bb:75:c9:ed:bf:89:e1:c1:cf:bb:
04:4b:ac:cf:f5:b6:3e:45:98:42:ae:0d:0e:43:40:5f:05:01:
74:21:81:63:dc:b8:6b:c2:46:f5:89:84:d8:f7:b3:4f:35:3d:
97:4f:a8:7e:c0:61:d0:39:2f:ea:40:30:80:3d:3d:55:76:c0:
8b:79:a8:94:07:c1:1b:20:58:86:b8:18:ea:5e:00:d4:cf:39:
be:d0:cc:12:48:96:d0:5b:19:87:66:1e:f0:ac:db:90:02:19:
00:6e:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:19 2025 by rpki-client