Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a676b703-84cf-36db-bfe2-0123d116757a.roa
File: a676b703-84cf-36db-bfe2-0123d116757a.roa (raw, json)
Hash identifier: NMMpicHM0RjgU/DwJbrs3Id7UaGp2sVWI4cWauUSTEc=
Subject key identifier: A4:D1:47:AC:0C:A6:7A:48:15:CC:0B:C3:55:DD:AF:70:3C:AA:13:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA8E9D283292C61B6B4A7440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a676b703-84cf-36db-bfe2-0123d116757a.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:8e:9d:28:32:92:c6:1b:6b:4a:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=1ed3e3ee-a1a9-4ac8-bb1f-0378d0f40c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:84:0a:83:d5:4f:9f:ed:ba:98:aa:bc:0c:
72:6b:5f:b3:19:65:d1:d6:60:74:f1:86:24:e8:d5:
65:a1:62:3b:f6:72:bd:6b:88:91:d1:96:e6:18:17:
4a:5e:10:c5:1e:84:1a:67:60:67:d8:1d:5d:dc:3a:
94:20:62:a7:77:f3:1a:27:5e:ae:63:03:e5:7f:10:
42:53:f3:29:2b:b9:1b:2b:c8:55:1b:57:3d:a2:b0:
20:43:37:8c:59:04:42:9f:44:98:f0:a4:18:e8:eb:
c4:a9:26:37:4f:7e:0f:43:2b:c0:23:c1:16:eb:f1:
b2:90:94:f1:59:76:82:87:90:46:a4:19:0c:d1:d9:
80:52:24:4c:15:4a:08:54:e9:b8:3a:29:62:7d:8e:
1c:2b:ea:94:cb:0b:d3:03:fb:94:cc:f2:0a:bd:89:
a6:d9:06:62:8f:a7:3f:8b:b7:d1:9d:49:7e:96:49:
dd:69:77:49:e4:75:9a:76:0b:bc:f2:55:8d:59:f4:
48:1c:d3:3d:5f:2c:aa:fd:02:26:a6:ed:ba:7a:87:
91:c4:9c:2c:92:d9:92:ba:1e:f7:1b:e2:39:e8:30:
dd:40:15:9e:f3:30:09:ac:b3:c7:5d:de:36:92:a9:
15:02:90:f8:8c:08:87:52:2e:f9:3d:3e:e8:3b:ec:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:47:AC:0C:A6:7A:48:15:CC:0B:C3:55:DD:AF:70:3C:AA:13:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a676b703-84cf-36db-bfe2-0123d116757a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a6:70:93:f1:c8:43:75:81:3c:0b:78:95:96:0a:fc:eb:f0:
14:4b:51:8f:2b:f2:d0:c5:0e:43:ab:07:6e:68:60:80:0a:93:
21:94:5e:2a:59:46:13:86:56:d3:ef:80:be:5d:11:d7:88:c6:
68:4e:3c:33:3e:52:8c:6a:5d:2a:03:2f:b6:33:fa:19:15:7a:
e8:0b:32:03:60:d4:87:b2:f8:e8:57:4d:69:ff:e4:5f:23:ea:
f0:b4:5e:8d:9a:32:ad:d1:ba:5c:cd:b5:1f:0d:0c:3c:5a:80:
43:a9:44:b2:0e:58:8b:26:63:4f:8c:01:3b:ed:41:20:12:4d:
6b:ad:ab:56:56:fb:82:04:6e:79:e2:c5:44:a7:dc:e8:18:88:
99:86:b5:0b:1f:7a:ea:e3:6c:e5:a3:77:25:53:5e:77:bf:0a:
d1:ac:b3:3d:c2:61:13:d8:db:26:10:47:00:c4:98:7f:4c:c7:
8a:08:e5:1e:5e:41:52:35:60:9d:17:c5:12:ad:f6:ee:d2:4d:
91:50:7c:8f:9f:d5:61:d8:b2:ed:88:95:06:4c:44:2c:a3:ce:
11:69:45:97:ec:07:f2:02:6a:44:eb:6a:45:01:5d:4e:b4:83:
9c:fb:0e:75:81:92:d9:b7:55:db:46:52:47:04:f0:cc:66:5f:
88:47:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:10 2025 by rpki-client