Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970a85cd-5e43-3a01-a35f-eb051ea8afd1.roa
File: 970a85cd-5e43-3a01-a35f-eb051ea8afd1.roa (raw, json)
Hash identifier: 8wYDyEkJ9byVsKK3kcttyDnUk0ZYpWdX6nD1HTstTVk=
Subject key identifier: D6:82:C7:5A:70:07:2E:3B:AD:D4:FB:E3:46:EF:D6:5D:4B:24:81:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5982BFFE5FBB9BE914664400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970a85cd-5e43-3a01-a35f-eb051ea8afd1.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:82:bf:fe:5f:bb:9b:e9:14:66:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=6d53e8bd-d777-4850-ac7e-67ac2ce6c698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:96:3a:0b:f9:b0:19:dd:f6:e9:09:b5:97:
20:55:6e:78:47:f0:e7:66:fb:39:24:80:10:16:2d:
d1:e7:b4:cd:72:ec:d1:43:34:c7:e9:4e:16:2f:6c:
d3:d9:c0:97:a8:df:1a:f1:10:8e:a6:9d:46:62:aa:
c0:7c:73:16:92:60:ac:de:52:53:7f:47:9f:25:9d:
8b:7e:01:20:e5:d6:d0:11:5a:e0:6f:1d:7d:64:91:
86:e4:b6:e3:90:a1:21:43:e7:da:fd:78:00:d0:43:
60:08:45:5e:ff:5f:72:2f:90:87:52:f2:48:87:3b:
c0:e5:13:20:bc:c6:a2:12:92:7b:39:fb:21:50:5b:
c3:1e:73:13:11:b9:e4:4c:88:73:1e:47:05:1e:dd:
6e:3f:e5:13:f0:f2:46:66:73:3f:3d:9e:d9:bb:92:
8d:46:30:b6:26:f5:2a:55:d0:80:ed:47:98:a8:16:
d8:89:29:29:db:61:6e:28:33:e8:88:93:58:ae:37:
26:52:45:97:d9:93:42:b0:d5:92:31:84:69:e3:24:
e3:25:16:c0:30:c9:69:1a:ad:e5:07:d9:b7:41:df:
5b:23:bb:0c:7d:fe:b1:4f:60:15:18:67:72:e9:dd:
c9:ba:96:82:cf:a2:95:c3:46:79:f7:c8:13:7e:cd:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:C7:5A:70:07:2E:3B:AD:D4:FB:E3:46:EF:D6:5D:4B:24:81:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970a85cd-5e43-3a01-a35f-eb051ea8afd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0c:c9:ab:84:2a:c5:f8:2b:25:23:23:74:32:4b:8e:79:7b:
a4:6d:65:8b:02:10:8b:1c:7f:c1:86:47:54:c4:60:48:68:a9:
8a:46:59:6f:99:e8:9c:41:c0:0e:70:92:95:40:2b:d5:b4:ea:
7f:6e:d6:c6:00:d5:a8:e5:8e:1f:1b:04:84:19:03:28:92:22:
46:3c:62:54:ce:42:22:96:53:29:6f:6a:80:40:88:c8:63:04:
99:32:34:18:52:ea:37:b7:dc:75:7f:e5:28:ca:c6:d1:52:bf:
4b:77:9b:8f:30:b9:28:1a:75:e1:2b:ce:72:54:ea:e4:b9:a1:
d6:19:cd:bd:c5:db:d2:be:5c:de:2f:f8:d2:07:6a:91:60:03:
7e:33:6a:74:8a:8e:b7:9f:e0:4a:5c:d9:50:d2:c1:43:b4:59:
ba:65:8c:2f:ea:d0:7e:ef:47:fe:ac:0f:34:6c:db:b8:73:01:
3d:2f:f4:a9:1e:8c:b7:b5:99:71:7b:88:06:d5:29:f6:87:d2:
5c:55:93:47:6b:08:a4:7b:9c:38:5a:9b:45:6a:3d:c5:5b:2f:
de:d1:42:c0:37:d7:d2:2c:f7:7c:29:7e:78:46:ce:ce:87:fd:
a2:fb:6a:ac:db:4d:48:f0:20:92:fe:34:61:53:15:ce:3c:b9:
de:ff:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:38 2025 by rpki-client