Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70edd06-e951-3a3c-8bcb-ea5f81cc014b.roa
File: a70edd06-e951-3a3c-8bcb-ea5f81cc014b.roa (raw, json)
Hash identifier: uCVDetkxCDwAglyFeukk/Ik9+g6StkRlGPpLTP6eoDk=
Subject key identifier: CB:7A:FA:FF:FC:D3:2E:50:80:E7:5E:D7:E4:15:10:D1:B7:29:59:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CA43A66D6620893175F8F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70edd06-e951-3a3c-8bcb-ea5f81cc014b.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:a4:3a:66:d6:62:08:93:17:5f:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=691f0ff1-8826-4608-84ce-b894e826f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:df:22:a4:7f:69:ab:c5:22:67:10:e7:b5:
77:f2:cf:e0:7f:88:f0:0a:1f:a1:5b:91:20:01:83:
fb:ab:e9:f9:d4:93:b4:99:64:a8:99:dd:ca:34:f6:
9c:8b:11:2f:89:a4:fc:9f:9b:a6:38:04:7a:9d:36:
19:18:f5:4b:54:11:b6:c6:61:97:b2:02:56:df:9a:
10:10:fe:f2:92:08:e6:1e:00:05:f9:2b:e3:3f:cf:
f8:48:b0:10:8a:a7:9a:eb:1e:d1:3e:11:70:3e:b2:
dc:f2:a9:0c:9a:5c:eb:dd:5e:79:a2:e0:62:8b:8d:
bc:5f:ff:10:5f:e7:77:db:d7:92:f7:47:06:98:e2:
c6:19:40:24:9d:ac:8b:4e:3b:af:f0:68:9d:7d:b7:
97:57:9e:61:e6:03:18:20:ed:80:ff:04:81:81:40:
a0:e0:14:7e:d3:a2:57:eb:15:e6:a9:4f:b4:2f:90:
44:bd:31:f8:07:d4:06:6c:d8:fe:c4:66:b6:52:b5:
96:69:40:40:24:1b:20:db:2a:10:a2:36:07:32:1d:
5d:8c:cf:6c:ca:6f:3f:29:6b:80:e1:81:7f:21:67:
b2:31:26:f7:71:42:57:fc:3d:29:0f:7a:f2:5f:21:
c9:ca:47:fc:ad:d3:1f:20:28:95:df:fc:3e:77:e7:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:FA:FF:FC:D3:2E:50:80:E7:5E:D7:E4:15:10:D1:B7:29:59:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70edd06-e951-3a3c-8bcb-ea5f81cc014b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:01:13:23:05:98:a8:45:d3:45:39:9a:37:83:32:93:a2:6e:
df:8d:70:2d:a1:37:ce:8f:0a:d1:e2:0a:22:cf:7b:b6:f3:bc:
9f:5c:7d:99:f1:d1:3c:68:dc:d1:8a:fd:62:46:d8:38:92:b6:
bc:d9:98:04:7b:19:29:8b:59:f0:9b:31:34:d7:2f:72:b8:d9:
77:87:91:b2:4e:29:cd:d1:43:3a:ca:54:f9:5d:69:bf:ea:41:
e3:d1:c1:de:ba:cb:30:4f:cb:da:96:c9:1f:d4:4a:f2:78:9f:
94:1e:3f:0b:f5:9f:10:7c:39:91:75:0e:10:86:f5:ed:f9:87:
14:56:07:77:b8:0f:50:69:44:d9:a4:cf:dc:99:56:80:5e:f3:
96:98:a6:7d:0c:e2:eb:8b:d0:0b:df:54:d5:dd:87:eb:39:0f:
04:24:00:93:0e:2b:75:60:6a:0d:9b:b4:96:1d:a4:67:a0:66:
2a:d0:70:62:ed:f5:49:c2:d5:7c:4a:d3:58:c0:69:7f:cf:5d:
93:87:56:b8:af:60:6e:01:e6:ad:3c:da:da:7b:91:3b:c6:b5:
d4:11:06:d8:ed:f8:4e:30:3e:32:3d:87:a6:61:05:9c:91:0f:
33:b4:59:83:c9:fa:91:a5:2a:2a:da:f2:c2:bf:0a:b9:2f:fd:
75:f2:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:46:01 2025 by rpki-client