Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f4f0b84-f359-3702-80f7-5f59a4e10c58.roa
File: 9f4f0b84-f359-3702-80f7-5f59a4e10c58.roa (raw, json)
Hash identifier: zUI7jxjCiew7ODYDnvdFK77oqCcXyTCq2tiAQWCldfg=
Subject key identifier: 05:6D:C7:24:51:48:B5:FE:EC:23:87:D7:73:B3:C2:B9:BC:AB:E4:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5E09C080E1CBDE3EE9BE380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f4f0b84-f359-3702-80f7-5f59a4e10c58.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:e0:9c:08:0e:1c:bd:e3:ee:9b:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=a17e9470-d5e8-4bcb-97ad-6120df20b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cc:9c:5a:dc:15:b1:a3:8b:e6:13:3f:78:55:
aa:33:6b:5b:d3:e0:b1:62:e5:98:90:56:81:04:9d:
b1:72:e8:17:f0:71:7f:12:02:52:5a:b7:d1:58:e9:
57:cd:32:0e:48:cf:71:25:d7:63:72:07:0f:9e:d8:
6c:d4:70:29:2e:19:00:cb:48:f4:fe:b8:48:dd:08:
15:94:63:84:c8:3d:45:ac:22:5d:80:9b:04:96:13:
c4:ab:e8:f9:56:c0:58:5d:f7:c1:92:92:2b:b4:20:
a5:9c:f5:d1:b9:59:f0:73:20:5d:a1:e8:0c:68:53:
cb:e7:0f:37:e9:43:7c:72:ea:08:27:15:dd:a9:72:
ba:0e:3f:a9:16:30:ac:55:dd:29:02:57:ed:c0:f2:
21:a3:c4:b7:b6:19:1b:66:ff:b8:00:83:45:cf:fd:
1c:75:25:6d:98:99:a9:f7:b5:c0:20:1f:4b:31:99:
ef:51:68:b6:34:9b:c3:a5:05:1a:b1:e3:a0:f3:e8:
bd:6a:4e:16:61:6f:37:79:78:f9:70:4f:b5:77:8c:
82:a0:ad:55:95:c9:68:5a:cd:b2:bd:b5:8a:d2:04:
f9:8c:c9:c6:54:77:a2:0b:25:2b:25:e1:8f:1f:1d:
b1:a9:77:61:ed:ad:63:75:5c:a2:15:31:5f:b6:27:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:C7:24:51:48:B5:FE:EC:23:87:D7:73:B3:C2:B9:BC:AB:E4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f4f0b84-f359-3702-80f7-5f59a4e10c58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:5a:78:02:80:56:bf:ce:20:d5:91:15:12:3b:08:38:6e:50:
07:96:7f:62:94:45:b5:ae:56:60:51:87:5f:35:a5:73:04:83:
d4:d4:c4:37:9e:11:b7:20:97:fd:bd:71:9a:25:a5:ed:71:02:
7f:68:e2:a2:08:23:ce:6e:d5:cc:a4:53:ff:9b:dc:74:a0:71:
eb:7f:87:bb:e8:63:13:ac:2c:ff:a1:cd:60:24:56:df:3c:c5:
84:2b:9f:d6:2b:4a:d9:10:a6:ef:7f:4c:d7:bf:82:f7:c7:d1:
ea:8a:c8:4f:4a:6a:36:e7:f4:50:d6:41:25:70:d6:82:12:4a:
34:08:80:d1:10:7d:39:a2:6e:86:ad:51:19:cd:75:85:f7:64:
c4:2a:8e:d7:39:57:2a:7f:8c:5e:ed:dd:f5:34:b6:29:97:ed:
9c:8f:9d:b5:3e:aa:46:24:b5:3b:6a:68:b0:55:f0:c6:f7:10:
f0:27:23:41:4a:55:d4:9e:86:c6:5f:6d:d1:6d:35:60:11:54:
96:f7:bc:b2:03:36:7c:64:50:b1:58:e7:e9:38:b5:c6:20:1b:
d2:4d:33:24:8a:ad:6c:63:ba:98:3d:d3:7f:ca:aa:49:2d:48:
2c:40:f3:92:cb:d6:83:c8:1c:4a:3c:03:9f:16:f5:c4:a0:63:
f6:d1:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:20 2025 by rpki-client