Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97940449-14e9-32b5-8fa6-3960f437cec0.roa
File: 97940449-14e9-32b5-8fa6-3960f437cec0.roa (raw, json)
Hash identifier: VdWdMdZA/Dv72UbX4EROIZ8Q4MvWltSy12xXYg2yL20=
Subject key identifier: 0A:87:BB:AB:D9:D4:08:90:63:EA:01:8F:2E:07:7E:43:B0:5A:49:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F336F332E93C4C5F053B9A400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97940449-14e9-32b5-8fa6-3960f437cec0.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:6f:33:2e:93:c4:c5:f0:53:b9:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=f0118934-9e7d-438f-8775-a3531e325ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:d9:66:4d:25:63:dc:5d:8e:42:3d:c0:9c:
d9:82:ca:74:55:ec:6e:ac:0e:ce:a2:ba:eb:a9:f6:
01:ea:3b:e5:36:c6:ce:e2:45:31:a8:a1:43:cb:89:
82:80:74:d7:5b:c2:b1:d8:8b:8a:c4:15:3c:0d:2a:
65:03:4f:d6:38:33:85:78:3c:9e:58:f1:85:25:64:
a6:69:16:8d:be:76:8a:27:bb:97:4d:6b:68:cf:aa:
79:98:ac:56:fb:b8:aa:e5:9a:08:92:5f:4d:ca:1b:
7d:ef:a5:08:37:f9:0b:bf:68:db:8c:e2:ee:7d:f2:
97:d3:d8:4e:76:3f:3d:38:7a:08:d7:d4:12:e5:aa:
df:68:83:78:c1:13:aa:e3:58:0d:00:fe:5a:f9:32:
ea:58:ff:f2:51:04:af:d5:cd:63:a8:db:f6:87:31:
98:df:db:f6:fd:34:56:49:aa:b1:6b:c7:56:b6:01:
3e:08:9d:99:44:2b:43:a4:93:f8:b5:c0:e6:1e:65:
35:b5:57:c6:08:8e:48:6b:d1:30:a2:65:e4:6f:bc:
dd:3a:c4:63:5b:bf:c8:38:ad:b8:e7:3e:43:1e:b2:
87:a0:c7:6a:c6:06:de:8e:d9:1f:6a:ae:44:7e:8a:
b7:23:0a:59:84:58:02:c8:f7:17:1f:5e:60:2d:5d:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:BB:AB:D9:D4:08:90:63:EA:01:8F:2E:07:7E:43:B0:5A:49:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97940449-14e9-32b5-8fa6-3960f437cec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:31:34:12:ba:d9:49:02:f5:78:83:5c:69:7f:e4:50:b8:0c:
56:89:70:01:03:cc:b6:be:0a:b0:df:03:1b:cc:f1:0d:52:d5:
20:d1:e7:a7:2f:0c:e5:bf:81:02:ce:cc:bd:d8:4c:0b:a7:a7:
22:96:62:31:6c:9e:c4:40:ec:c8:46:15:fa:8c:3d:2b:82:97:
b2:53:38:77:cc:44:d2:0a:7d:f4:06:ed:f8:aa:94:6e:dd:e4:
eb:64:f7:6c:51:5e:82:33:9e:3e:42:51:1f:0f:0e:2d:e4:f0:
0e:7b:12:6c:34:17:20:5b:0f:2a:b2:b7:de:40:3a:99:62:4a:
ba:ce:6c:86:b7:87:75:17:e5:de:a6:83:04:30:a5:14:a7:a1:
ec:ac:62:a9:59:8a:15:da:00:7d:a5:39:94:2f:73:80:74:75:
86:55:54:e9:b3:5c:e7:0e:69:66:5d:ef:63:c5:1e:50:ff:cb:
91:82:18:1b:45:98:6a:7b:6b:91:61:36:70:b4:bb:f6:4c:43:
f7:1f:4d:c0:34:ec:9f:06:96:0a:6e:6a:7d:96:46:f5:b9:6e:
12:7a:4d:4b:c1:22:bf:dd:c2:2a:00:f2:ed:16:24:c1:33:ba:
43:38:da:ad:78:8b:80:62:82:40:88:ff:4f:7d:6b:b9:99:ef:
90:52:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:46 2025 by rpki-client