Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985f662e-78c9-3c73-aa59-834d0f8bd166.roa
File: 985f662e-78c9-3c73-aa59-834d0f8bd166.roa (raw, json)
Hash identifier: /KhbtxyGeeOmftLFIWVGBGrUfpWTpjdEW8Xa3pxdZzw=
Subject key identifier: 7C:24:2E:E3:64:57:C2:CB:27:D7:F8:EE:13:AC:E3:64:59:61:78:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E974D21552E770C35F7BF5500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985f662e-78c9-3c73-aa59-834d0f8bd166.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:4d:21:55:2e:77:0c:35:f7:bf:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=5a18a4c2-8b8b-4b29-9b8d-eb02832ef7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:09:0c:da:a1:1f:9d:87:9c:bf:65:e5:2c:
64:da:e1:f5:0f:91:0a:64:75:b6:67:c8:80:6a:27:
b3:35:e5:c8:2a:0e:35:60:82:17:6f:47:a8:a2:47:
8f:a0:77:83:d1:ef:7d:81:09:27:b7:e8:28:b6:c7:
83:5d:7d:02:af:2b:63:52:e9:56:9f:ea:1f:99:23:
6a:be:c9:85:93:0a:c7:65:e9:27:fb:c8:1c:6f:ae:
bb:33:3a:0c:30:80:e2:2e:1a:e1:2b:8d:7f:c9:0b:
5d:9d:8f:17:6a:14:d7:6e:3e:61:7a:1b:08:ff:1e:
0f:95:e6:04:80:46:8d:15:08:2c:f0:0e:90:9b:a4:
7e:9a:bc:ec:01:78:aa:31:4c:d9:da:b0:26:29:07:
93:5c:d3:52:b5:42:a9:6f:6d:5c:b4:b6:1c:b8:b1:
2c:0d:bc:0f:0e:5b:34:80:b3:70:dc:f6:f7:23:ef:
92:06:48:82:47:b9:5e:16:49:69:d4:0b:58:7d:8c:
4e:48:23:07:0a:0a:04:72:73:18:03:7a:5c:d9:ec:
bd:56:8d:81:18:89:b7:01:46:b0:7a:fa:13:db:ae:
f2:10:0e:ee:0b:02:e1:90:c3:fb:f4:6b:87:2b:88:
f3:94:e6:da:83:d8:9b:03:32:06:67:49:7b:69:6c:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:2E:E3:64:57:C2:CB:27:D7:F8:EE:13:AC:E3:64:59:61:78:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985f662e-78c9-3c73-aa59-834d0f8bd166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:f9:bb:68:9a:98:43:b8:37:e1:bf:7a:4d:cb:97:2d:dc:3a:
1e:1f:2e:85:5c:a0:13:e0:a7:3d:d7:4b:92:80:bb:f7:37:18:
60:ed:f7:a2:0a:87:0f:5e:1e:da:29:a6:5f:95:ce:fe:ea:6e:
5c:01:fc:ea:0f:ca:11:9c:18:4f:be:b8:e8:8c:db:df:6a:24:
a8:b3:b2:ca:a7:10:22:98:e8:d9:f7:4c:fc:c1:e6:d8:30:e1:
24:f0:be:3a:92:f3:07:24:91:88:64:0d:6d:4c:ce:dd:b8:cc:
a9:66:f8:ba:a6:95:b8:bb:14:ba:b6:18:68:2d:85:de:ae:33:
bc:af:97:9d:f7:85:6e:aa:ec:f5:71:a3:31:e7:0c:3d:70:9d:
7f:cb:52:1d:99:d8:52:17:51:d1:7f:f5:93:eb:23:57:8d:cf:
f3:c3:2e:79:4f:21:64:7f:90:4a:ce:25:e0:cc:45:f2:33:23:
9a:13:68:c4:33:6b:63:48:cc:76:a6:37:9e:eb:7d:76:9e:b4:
4b:64:c5:e8:a5:c6:20:2c:ce:b9:34:dc:b8:d6:3d:dc:62:9e:
7a:b3:aa:c3:cc:97:c3:cb:ad:39:3d:74:01:94:ec:6c:b9:b9:
2e:c5:ea:93:7d:fc:9a:e3:14:0d:20:82:1a:e1:f6:1d:f8:c0:
7d:18:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:18 2025 by rpki-client