Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dc9380c-f460-3c6d-8eec-b865718276c9.roa
File: 9dc9380c-f460-3c6d-8eec-b865718276c9.roa (raw, json)
Hash identifier: KNBIVPq1lecNIbYfV/gkeKuxSlNIU4gsb88VUpz9fWI=
Subject key identifier: B0:BC:18:22:0C:A3:72:BE:3D:A2:24:54:AD:04:25:01:F1:93:AB:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE44CD4CA45391DF55C8C1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dc9380c-f460-3c6d-8eec-b865718276c9.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:44:cd:4c:a4:53:91:df:55:c8:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=3b044cf0-e60e-43d3-a593-4e78d13a2af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:d6:28:aa:2c:d3:46:cf:e1:47:8c:dc:21:
f5:79:cb:1e:09:0c:c6:68:9a:c6:48:51:c3:46:04:
7e:58:de:c5:a3:3d:83:79:36:d9:85:44:d8:a2:76:
0d:df:30:ed:ab:14:3b:17:61:f5:13:2b:86:ac:44:
af:e1:ec:e5:e1:57:1e:fd:a8:52:47:05:8b:2c:e9:
64:f7:dc:0d:e7:e7:6c:19:46:5e:f7:d3:8b:08:d9:
6d:15:96:21:52:cd:72:e2:ab:3b:70:df:35:a3:07:
78:4a:74:51:3e:d4:a8:26:9b:f3:51:56:1d:1b:6a:
61:a4:26:f1:ca:f8:a0:87:bb:f5:57:35:0f:09:4c:
10:44:45:9d:2b:88:d8:46:03:25:56:07:cd:47:58:
02:f7:5c:77:fb:65:df:b7:39:41:6c:9f:0a:6e:df:
14:64:c8:9e:b5:45:71:ba:d7:98:49:5a:c6:90:22:
99:e2:58:04:23:86:84:d9:16:ac:34:ca:7b:07:a4:
6f:7a:ee:56:85:6a:cd:4c:70:ae:4d:b3:8c:a2:74:
ef:ca:7f:98:3c:80:d2:6b:41:4c:2b:56:df:22:4d:
2f:be:9a:56:7f:5b:5f:7d:2d:9f:41:e2:8c:74:4a:
16:7f:dc:32:79:0c:3b:e8:03:90:21:b2:61:2f:83:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:18:22:0C:A3:72:BE:3D:A2:24:54:AD:04:25:01:F1:93:AB:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dc9380c-f460-3c6d-8eec-b865718276c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:4b:d5:32:01:29:f9:3f:cc:00:22:0d:80:e7:2f:04:82:90:
b4:3f:92:3c:05:ba:f3:3d:68:85:e5:66:cd:d8:8c:4f:72:04:
d3:df:df:9e:20:99:b9:51:7a:a3:24:09:ed:5e:c3:3f:0d:d1:
ec:b4:a4:fb:a3:67:ae:f0:8e:79:55:d8:c5:04:d8:29:8e:e0:
fe:ed:9f:22:d9:72:59:83:9a:78:49:49:80:36:c4:2c:f2:6b:
44:16:a0:13:c5:55:05:4b:fb:20:61:74:27:73:bb:31:ce:d5:
80:2b:bf:11:b0:71:ff:f7:ed:e7:3c:0f:dd:d2:bb:55:4c:57:
ab:ba:71:35:91:e6:a9:5c:f0:d7:57:1b:29:66:66:8e:4d:fb:
bf:73:a0:b9:9b:09:91:34:d6:0f:24:9f:cc:d2:9a:89:fc:f5:
f2:ea:ac:5d:5f:38:ec:77:2c:2b:ff:99:b9:ec:8e:98:88:1b:
58:d2:28:4d:cd:01:12:4a:fb:a8:84:ed:45:72:f3:82:a8:3c:
93:49:1a:6b:2d:09:77:2a:2b:77:36:54:fd:8b:26:7d:fe:56:
35:aa:8f:75:aa:72:b7:19:d3:a5:29:0d:c5:80:3f:1d:b3:ce:
92:a9:93:e6:00:c4:04:f1:23:fd:2a:4e:7a:80:69:d0:4c:b4:
c3:e7:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:00 2025 by rpki-client