Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d436066-2ccd-32e4-b592-e4f8362efa46.roa
File: 9d436066-2ccd-32e4-b592-e4f8362efa46.roa (raw, json)
Hash identifier: fIEEZbEMrbJEOpjKWPhPCH+X9sJkNkp3KRFm6k2dno4=
Subject key identifier: 3D:70:37:96:D1:6C:0F:E6:18:19:35:86:8D:B8:8D:90:F7:87:62:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA96A4803C0BD0978D36ED2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d436066-2ccd-32e4-b592-e4f8362efa46.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:6a:48:03:c0:bd:09:78:d3:6e:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=28785813-aa0e-40c2-80c2-5ce525861236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:fb:ad:34:b7:6f:99:48:e2:05:e6:08:9a:
04:35:4b:52:2b:7a:6e:15:27:e1:68:00:95:10:f1:
06:6c:39:70:4a:9f:d7:a4:53:87:05:c6:8f:a9:59:
4b:49:60:a6:25:59:ce:55:de:9d:b3:51:db:82:74:
8f:e2:2c:79:78:d6:28:2c:f4:97:1b:dd:24:a1:f8:
0c:6e:b2:b3:77:69:52:c8:80:7a:08:bd:2b:45:f6:
f0:6b:16:2e:3d:e2:e8:38:e5:bd:de:73:43:47:e6:
7c:c2:43:09:7a:7e:33:90:fa:1f:b6:c7:e3:ef:9a:
d2:85:f1:0f:d3:25:0d:82:5f:a7:52:63:75:6f:ee:
0e:88:4c:0c:ec:3f:07:45:f9:58:f7:a9:37:d5:3a:
76:8f:68:6b:37:96:a6:90:3d:51:a7:f9:c3:fe:55:
3f:5d:ab:d5:9d:cb:20:8c:f1:16:1d:c0:9f:df:06:
9e:c4:79:20:52:3b:4d:21:83:64:df:50:a7:24:60:
58:59:07:cd:56:40:c1:c3:63:d5:8d:13:e4:53:70:
93:31:52:06:af:8f:7f:a3:9b:55:27:6e:53:6a:91:
88:67:e6:27:76:94:80:3b:5e:27:e7:b8:fd:e6:cb:
82:31:a6:07:c8:7a:65:95:d9:df:81:74:b2:80:15:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:37:96:D1:6C:0F:E6:18:19:35:86:8D:B8:8D:90:F7:87:62:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d436066-2ccd-32e4-b592-e4f8362efa46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:e5:f0:f6:aa:96:da:62:23:65:36:c6:d4:67:87:fb:00:b0:
e4:b9:09:85:eb:4f:b6:ad:c7:fc:74:eb:3e:f9:b6:a4:a3:44:
e8:c8:b9:25:bf:2b:5f:60:3c:7c:8a:cd:25:74:7d:cf:89:1c:
66:9e:69:dc:7c:7e:42:bb:29:e8:e3:72:f5:91:5b:0f:5c:8b:
f1:e6:a8:bb:64:b3:e8:6b:2f:ab:11:ec:e5:e3:f3:fc:49:1c:
95:ef:01:75:58:d4:ed:39:e3:1d:b8:23:90:01:ef:c3:d2:e6:
50:33:66:70:61:c1:af:6e:6d:a2:4a:9c:90:a4:80:44:6e:1d:
41:1a:c6:9a:19:10:9c:d1:a5:72:68:c8:cf:b1:5f:7d:83:b9:
61:b3:10:99:25:f3:3a:d2:3d:c2:19:e0:a6:3a:0f:86:e2:a2:
89:73:88:ff:2d:a2:70:ee:cf:e8:ef:22:e7:a9:ac:56:65:8e:
c0:e2:32:32:de:02:32:c8:4e:a7:b1:a3:29:5e:93:a4:5c:19:
15:f0:7d:47:de:50:91:61:3d:c8:90:55:87:03:bc:68:f6:8c:
7c:09:74:40:e0:79:bf:a8:0d:14:a5:cb:ed:58:0d:d0:37:10:
22:99:92:94:f7:42:0e:f2:fa:84:91:93:4f:26:de:59:98:8f:
51:2d:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:51 2025 by rpki-client