Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95e9b4a0-b6e3-36c2-832a-7bb648cbe144.roa
File: 95e9b4a0-b6e3-36c2-832a-7bb648cbe144.roa (raw, json)
Hash identifier: vSdIRRM645W8sAP5iDm9z34w0JtCpp77oI0ep6jXezw=
Subject key identifier: C1:A1:E4:2D:B0:52:06:DF:54:D6:3C:02:F6:91:DB:ED:B5:92:03:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E97D31761DD8E2FDD702F60C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95e9b4a0-b6e3-36c2-832a-7bb648cbe144.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:d3:17:61:dd:8e:2f:dd:70:2f:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=e6a3c490-3bdb-4835-b1d8-7b9f8befbbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:e2:59:65:64:0f:a5:58:81:14:ab:67:77:
14:9d:34:cb:c4:f6:af:9b:cb:b5:08:cd:75:c7:38:
c3:9e:83:61:5a:86:eb:af:cc:a4:c2:ee:bb:58:29:
3a:3c:1f:4c:b6:00:25:1e:42:18:74:82:63:4f:a7:
c7:66:6c:c9:b9:96:62:bc:8a:70:67:35:55:1a:24:
c3:08:2b:ff:99:77:8c:b8:42:a8:7b:ff:4b:4f:c3:
cc:20:27:16:41:fb:1c:44:eb:20:de:8d:49:3b:9c:
4a:d7:41:5f:21:1d:df:80:71:ec:85:a4:ed:97:8d:
10:d9:ce:c5:04:7e:06:03:a5:83:18:e9:3f:69:3a:
e2:67:ff:1e:eb:ab:3f:3d:d6:b7:29:f6:08:28:6b:
ca:46:22:2c:7f:f5:86:3e:9d:3c:fb:10:c0:75:d1:
bf:ec:81:a5:31:06:24:99:89:37:9c:56:72:bc:83:
62:d6:28:87:bc:3b:8e:45:1b:b4:9c:9f:7b:10:60:
83:f7:70:29:37:c7:49:db:f8:de:3e:9c:28:ff:32:
d9:5c:29:bd:95:66:6f:ac:bd:75:bd:f3:55:64:67:
3a:35:ae:d0:14:84:72:76:6c:48:c3:21:40:16:a3:
f8:1c:3c:9c:18:18:81:93:52:25:e6:32:f3:d6:6e:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:E4:2D:B0:52:06:DF:54:D6:3C:02:F6:91:DB:ED:B5:92:03:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95e9b4a0-b6e3-36c2-832a-7bb648cbe144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a0:b7:a3:a5:4c:f2:79:c9:af:d5:76:c8:49:72:17:3c:f9:
df:a8:48:a5:4e:0b:a0:84:6e:30:07:62:2d:09:2f:08:bc:20:
b4:8f:6d:1c:15:31:d8:2f:d1:21:8b:ee:18:97:b3:4a:26:49:
34:4d:84:c7:1a:7c:30:48:f2:8a:fb:cd:98:da:42:86:bd:3c:
27:a5:eb:c1:ff:85:d5:04:b0:07:4a:63:4e:a3:10:2b:6c:52:
62:f5:e0:17:d8:b8:5a:f8:1e:26:f9:44:0c:6b:56:34:29:87:
01:99:5a:ae:d0:77:02:a8:b0:ec:ef:84:1c:14:35:55:08:13:
9e:4a:cb:60:93:a1:64:0a:84:58:31:5c:3a:31:1d:ce:e2:a0:
ff:9b:fc:d7:c1:34:f9:a4:71:29:e8:1f:ca:fa:fa:de:cf:d6:
eb:21:eb:c9:66:ce:a7:e6:f3:fc:1f:f8:24:76:1c:9e:b7:cb:
2e:ef:4b:e2:87:f1:55:90:50:1f:55:53:29:ce:a6:0a:19:67:
63:6e:92:73:bd:f7:90:04:70:47:fb:0a:46:de:cc:64:5d:7a:
93:f2:ff:ef:78:3f:c4:8d:71:83:c9:ce:2e:a0:c9:eb:5a:6b:
b7:a1:1b:46:c2:99:72:4f:f9:ca:9b:4e:94:7a:d5:b0:4c:dd:
fb:25:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:20 2025 by rpki-client