Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfe7bc1-8cbe-387d-92e7-0f96ceba85b8.roa
File: acfe7bc1-8cbe-387d-92e7-0f96ceba85b8.roa (raw, json)
Hash identifier: 1BEQyN4RgonrFygF4BXgVmRXAijXDgkPc0LWG8Rn7kM=
Subject key identifier: 57:75:77:91:DA:6D:8D:8F:07:3B:D9:77:59:D4:F4:57:93:89:0A:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4428F29EB71E921E08576180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfe7bc1-8cbe-387d-92e7-0f96ceba85b8.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:28:f2:9e:b7:1e:92:1e:08:57:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=55bcb876-b819-401e-a678-62a6202065f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:66:ea:86:52:50:b1:c2:d6:85:1f:f1:94:
43:26:d1:2a:5e:a1:25:35:2d:f8:7c:6e:78:52:f6:
58:44:ba:d2:91:23:5e:c5:e0:51:b0:1d:b9:1e:b6:
1c:ef:da:5f:81:2c:07:aa:bf:8c:76:a4:26:ba:08:
70:50:d4:06:26:a4:60:76:22:e2:bb:14:96:05:82:
1f:da:e2:5b:89:5f:86:d6:97:ea:ce:15:a9:db:c1:
1a:e3:8a:c5:f5:5e:ac:12:98:d1:8a:fa:a0:3c:03:
80:e1:bd:99:f1:56:47:d1:8e:26:a7:7a:f3:3c:a9:
bd:fb:fc:7c:e1:8f:ae:03:d3:9d:96:3e:2d:a9:83:
b4:98:c9:0d:29:26:f6:f2:24:38:14:d2:86:74:28:
0f:11:4a:b7:12:f4:90:66:73:4b:a3:0a:d2:65:bd:
ba:8e:fe:da:3d:ad:d6:e8:21:2d:66:11:2a:33:d6:
8b:f9:f3:2e:0f:85:9e:87:ed:29:17:ed:6b:31:4b:
b0:fa:7d:c5:9f:58:18:f0:12:f0:85:52:d3:32:fa:
96:7f:86:23:e1:84:8b:2f:d3:6a:11:09:92:1d:3a:
92:41:66:af:11:91:8f:b2:69:2f:e4:de:c9:87:df:
15:6b:bf:61:91:2c:c8:8f:f6:21:79:9b:b4:21:c5:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:77:91:DA:6D:8D:8F:07:3B:D9:77:59:D4:F4:57:93:89:0A:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acfe7bc1-8cbe-387d-92e7-0f96ceba85b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a2:3e:f6:e0:6d:77:f2:04:0d:e7:30:53:ec:6c:67:d9:93:
70:7a:7e:fd:6d:1b:0e:58:24:d1:f9:ac:c4:e2:4f:4f:ff:d8:
ef:93:24:7d:ac:b1:bc:63:d2:6d:9c:50:73:c1:93:92:3d:36:
71:30:f9:e7:bb:04:60:69:db:9a:a7:01:e0:e5:3f:b0:8b:d3:
5f:eb:24:f3:9c:32:ed:c8:b3:41:94:54:4b:38:f8:68:f1:d5:
c6:62:f1:18:94:5a:87:6b:90:25:de:b4:79:21:8d:17:1d:84:
e0:60:e2:5d:df:7c:f6:bd:0f:6f:9e:c2:63:a6:b1:71:ea:36:
a6:86:b3:c9:f1:d5:b7:db:a3:54:4d:b4:24:54:53:d2:f5:72:
fc:e5:7d:ef:2a:0f:1b:67:0a:ac:81:5a:f8:f2:62:3f:7f:9d:
44:bc:c7:43:c5:cb:7f:f7:86:9a:e8:02:d0:67:67:24:ab:2b:
ea:d5:bf:2a:44:43:d8:2d:76:90:6e:52:60:c1:28:d6:89:68:
4e:f7:20:72:95:96:b7:7e:b4:23:2b:83:93:18:ae:6a:cd:fd:
df:aa:97:fe:c9:d3:a0:37:7d:f3:da:a6:a0:c3:0b:90:68:1e:
91:2f:37:f8:ad:c7:15:bd:2f:01:ee:26:15:6e:9b:94:e9:3d:
f0:25:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:28 2025 by rpki-client