Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac343f02-5350-32a1-8d05-18537a58ddb8.roa
File: ac343f02-5350-32a1-8d05-18537a58ddb8.roa (raw, json)
Hash identifier: Ze8RFYCxBkD1zX74Uz+dTf8e0aTH7UM0imsQJLfpAqo=
Subject key identifier: E4:11:03:47:66:7E:B8:F3:A0:26:41:DC:16:5A:46:8A:5C:48:BE:72
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBDC6704C45476B977E46D640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac343f02-5350-32a1-8d05-18537a58ddb8.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:c6:70:4c:45:47:6b:97:7e:46:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=1648bf3d-f332-40d6-8f0e-d0d5edd4718a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:29:6e:9b:c1:57:d5:22:56:fb:54:fc:13:
fc:10:c0:34:fe:55:65:e9:2d:f2:89:ed:c3:0e:ae:
f8:4b:c0:21:ec:26:61:4e:8d:8e:7f:30:5a:82:71:
ba:de:91:4f:64:08:f7:c9:cb:34:76:16:3a:e9:19:
73:c2:86:f3:f0:70:e5:70:3a:51:b4:c7:cb:c6:88:
85:bb:d6:dc:89:83:00:41:32:23:f9:c0:2f:de:42:
45:b6:e4:cd:47:ef:98:d5:75:52:3b:a7:19:80:43:
10:03:bb:40:6b:16:1e:43:a1:1f:1f:21:cf:84:06:
5c:35:95:7f:1e:97:99:e2:fb:74:b9:4d:88:77:84:
3b:dd:35:b0:88:b0:13:a1:5c:2b:56:0f:2a:f4:51:
3e:3b:6b:22:87:b5:a4:34:78:be:6f:aa:cf:d0:97:
8d:cf:5f:f2:b1:bb:a6:f8:67:b1:0b:43:50:e1:f7:
88:0b:f9:19:cf:ff:c1:75:66:5a:6c:b6:a3:02:81:
64:eb:b1:8c:4d:12:88:6f:35:1b:46:65:bb:b1:e7:
ca:43:1a:16:c1:8b:29:f5:e9:ea:55:09:a9:ad:3e:
a5:8a:92:13:c4:2b:9d:3b:64:f8:4f:7d:73:e0:5e:
8f:e7:17:ac:14:fe:6f:38:88:43:ab:dd:ce:aa:88:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:03:47:66:7E:B8:F3:A0:26:41:DC:16:5A:46:8A:5C:48:BE:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac343f02-5350-32a1-8d05-18537a58ddb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:54:16:09:b2:76:e4:a2:3b:a0:1d:48:7b:4e:8f:de:9a:89:
d5:fd:d4:39:4a:5c:f6:5e:18:9b:7c:e7:f8:5e:bb:ac:a5:fc:
53:99:6c:c6:18:87:74:d0:41:ba:43:c8:cd:30:16:78:c9:b1:
ec:97:66:a3:6d:92:8d:78:80:8a:b4:e7:34:99:f9:08:a2:db:
88:6a:a6:e8:2e:0b:d9:1a:67:7c:5e:1e:14:db:e1:c3:e4:84:
2a:62:87:ca:d6:cd:78:52:97:ee:4d:59:29:50:62:f5:7c:a9:
ed:b8:61:9f:41:40:b8:10:ee:fb:81:94:6c:ef:b7:fc:b1:3f:
c1:7a:2b:47:c6:c9:91:e6:c8:b5:92:32:0d:ec:96:ae:42:bd:
1c:40:e4:c4:d7:72:19:43:d8:c6:1e:0f:f1:d0:97:60:23:00:
b5:95:be:09:10:a1:90:e9:74:09:ac:80:b8:18:3f:92:19:ba:
21:ca:22:9e:cb:a6:62:92:2f:bc:86:e6:cd:20:d0:26:10:37:
09:78:6d:e1:37:8f:69:ec:09:9d:6a:84:26:c5:d8:66:b3:41:
50:de:27:d8:4f:f5:4e:ef:e3:ac:03:56:92:47:1d:98:aa:63:
02:c0:d2:21:69:51:38:b2:d6:62:06:af:61:b5:df:95:ee:c5:
ce:fd:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:09 2025 by rpki-client