Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ab4162f-25b7-3ea6-ad73-32040590b383.roa
File: 9ab4162f-25b7-3ea6-ad73-32040590b383.roa (raw, json)
Hash identifier: mzX7Uw22PKF3ulpYbrgri9Yqk6Gs5SRPUk6ue+EKrDc=
Subject key identifier: 4F:0B:85:FD:57:C1:29:39:3B:47:DC:68:D9:7C:E0:18:E5:1A:95:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D808A20E7F37C7A38E877F4E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ab4162f-25b7-3ea6-ad73-32040590b383.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:8a:20:e7:f3:7c:7a:38:e8:77:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=218e2af0-63b2-45b9-a9f4-9a9c9bbf72bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:d5:5a:6f:c4:d1:84:e2:d7:07:43:53:54:
7e:47:38:99:c0:e4:4d:15:a0:9d:ab:7e:f7:21:cd:
49:f8:ce:5b:83:7c:74:46:c2:4a:5f:0e:a5:c2:50:
16:4e:75:6c:00:ba:cd:80:9f:51:02:1f:b2:e5:35:
9c:d5:d1:f3:68:be:96:72:cf:78:fe:47:7c:15:a4:
40:ac:09:d8:95:7d:80:ae:e0:20:55:00:3a:82:03:
d4:3e:f1:44:93:4c:d8:80:9a:9a:ab:0d:88:e3:e1:
9a:dc:de:53:c9:1f:c9:3b:e6:1c:6d:4b:a7:99:f9:
4d:8a:e3:cc:5d:cd:ff:6f:8f:82:4d:6e:6b:de:2a:
4c:54:d4:5d:fb:c7:6f:3c:a3:2b:db:be:90:a4:61:
cb:26:21:a6:99:bb:69:2b:fd:e9:78:80:cf:a1:6c:
38:1b:eb:11:03:73:af:b5:69:52:fd:04:04:3c:2d:
a0:bb:08:e5:3b:70:dc:25:dc:9d:10:58:2b:c8:c2:
74:7a:76:01:59:85:4f:0e:82:9c:de:31:8c:2f:2a:
63:30:f2:5f:c9:e1:97:45:3e:87:c4:d8:4a:3c:d2:
95:76:05:83:97:00:f2:92:9d:44:f7:39:85:0f:1d:
10:d8:f8:63:d4:61:7c:8d:44:aa:4d:ee:b0:f6:01:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:85:FD:57:C1:29:39:3B:47:DC:68:D9:7C:E0:18:E5:1A:95:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ab4162f-25b7-3ea6-ad73-32040590b383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d0:33:fa:61:10:d6:ad:2f:79:89:46:6b:c5:1c:0a:31:24:
08:3e:bd:16:d1:2b:a1:22:dd:81:88:69:de:7f:d4:6b:e8:0c:
d8:04:79:00:b2:72:88:4f:49:7c:19:dd:af:e7:16:bd:1c:40:
47:71:09:aa:11:fb:6f:d4:df:13:c8:7b:10:c5:03:18:85:ee:
4c:79:17:01:3e:7f:53:59:e4:21:df:98:75:89:32:bd:62:42:
20:1b:65:bb:12:79:23:51:9d:b0:ca:68:ce:10:13:c2:1f:57:
65:09:b7:a3:35:35:4b:af:79:f1:cb:ba:e4:ec:78:73:79:de:
f3:51:cf:07:bb:dd:e3:29:59:07:cd:16:6b:34:61:c2:2d:10:
a7:43:de:e0:37:a6:26:d2:31:23:8f:52:83:53:d3:17:b1:07:
29:9e:04:ef:67:ac:93:a3:42:a0:f4:09:a3:6b:28:db:12:7e:
18:27:8b:84:25:fc:80:f8:b6:b2:cc:20:a6:43:85:c0:52:74:
26:1b:f7:81:d6:b5:f2:d7:00:c9:1d:f0:cf:8d:85:80:9c:a5:
d7:4b:a4:9d:c0:88:fd:88:34:c6:79:a0:66:2c:df:fa:88:7c:
a1:cc:6b:c7:dd:aa:17:1d:49:d4:34:96:c7:15:cc:33:c4:34:
05:bb:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:28 2025 by rpki-client