Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aa962a3-ac0d-3367-be57-94001a9f62dc.roa
File: 9aa962a3-ac0d-3367-be57-94001a9f62dc.roa (raw, json)
Hash identifier: qSpiHHrsGHFvq5wVYcBlMZQEaf+dRUqxgGh4tyTxOQI=
Subject key identifier: 48:40:30:24:3C:5C:B2:99:C3:E0:43:30:2A:23:40:97:DA:08:0A:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0D1B2C1FDEEA09E88796FF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aa962a3-ac0d-3367-be57-94001a9f62dc.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0d:1b:2c:1f:de:ea:09:e8:87:96:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=3bd09ae3-976d-4249-b13a-bd6be5d38d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:f6:02:a7:48:9d:bb:3c:c9:99:f6:39:d2:
d0:e3:21:8a:b6:99:52:e1:0a:07:e3:54:73:84:8d:
39:6f:18:e9:cd:01:39:fe:e7:3b:62:ca:99:52:4a:
ad:12:27:76:f1:82:71:10:42:e4:8d:63:b8:0f:a3:
db:eb:e9:98:13:93:8e:db:05:49:5a:8c:59:e3:9d:
e8:ee:ec:e1:a6:93:d2:3d:bb:03:14:ca:80:c6:50:
d1:ac:22:eb:1f:2c:2b:ca:9f:de:18:50:af:64:b8:
ef:f2:5d:86:57:01:fb:9e:a7:b1:7b:40:dd:97:5e:
f2:9b:a4:be:ae:bb:76:25:84:36:1f:ec:00:01:e5:
f7:ab:6b:97:3c:29:45:d5:2a:da:21:f7:31:7f:e3:
63:2e:d4:f3:8a:78:52:87:b7:8b:11:b3:db:d0:dc:
b1:f1:8f:eb:90:d7:ac:10:43:08:bf:27:91:a6:2c:
3e:34:01:4a:7f:f0:fa:d1:ab:27:d7:da:92:0e:c2:
4f:96:b6:d7:11:1c:b2:ce:ba:2c:8d:cc:90:83:bc:
27:c0:fb:d9:19:2f:44:1f:0e:39:55:d6:51:f7:7a:
f3:f4:2a:ac:4e:87:3c:be:93:8f:35:5c:69:c4:8b:
a4:42:ae:03:c5:bb:13:52:16:f1:9e:3d:5a:16:48:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:30:24:3C:5C:B2:99:C3:E0:43:30:2A:23:40:97:DA:08:0A:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9aa962a3-ac0d-3367-be57-94001a9f62dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:39:b4:86:52:a8:42:e5:e3:48:37:72:c4:14:33:2c:90:77:
7f:9b:29:bf:82:65:e7:67:fd:34:d9:7c:0e:26:42:62:c0:44:
36:86:40:f7:12:6b:bf:50:e8:1e:91:cd:3f:21:76:27:10:40:
a2:7a:da:42:4c:d8:ec:4c:9f:f4:d9:a7:f3:92:0b:81:be:1d:
c6:86:74:c6:4f:a2:27:c9:79:9c:3e:c4:19:3c:61:4b:90:23:
68:b0:a6:95:7c:ee:45:e6:df:44:33:b5:98:a1:bb:a0:3b:b3:
a8:30:c7:9b:43:f1:43:9c:96:6a:d5:a5:5c:5d:88:19:d7:43:
70:5c:12:46:e5:1b:20:4d:93:b4:bb:21:6b:fb:b1:05:fc:53:
4d:6b:fc:57:b5:ab:dc:b4:de:99:ab:6f:52:3a:2d:dc:87:36:
9f:ca:b8:24:c8:27:6c:3f:6a:35:15:dd:84:f8:16:a6:26:52:
75:b0:1f:02:d0:9c:8e:9b:17:5f:d9:d6:d6:29:d8:c1:07:d9:
e4:00:57:37:f6:ba:5f:a4:bc:65:68:b2:2d:f7:ef:86:6d:de:
50:90:1d:5a:be:34:0a:5d:a6:68:c8:72:c2:b8:54:45:a8:c9:
97:3c:09:cf:c0:46:2b:ba:70:e8:21:02:e5:23:3c:c9:f4:11:
a0:11:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:28 2025 by rpki-client