Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af21ce91-2f74-3db9-8590-4d8b75d9fea1.roa
File: af21ce91-2f74-3db9-8590-4d8b75d9fea1.roa (raw, json)
Hash identifier: PahPQOnLjnV0BV21IXAMEHFsLquMXIJ6F3iSuoFQtEQ=
Subject key identifier: D0:A3:45:AD:29:CE:28:9D:B6:1C:5C:52:0B:25:4E:31:52:DF:1E:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D325DDD4813970DB470E8F8C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af21ce91-2f74-3db9-8590-4d8b75d9fea1.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:5d:dd:48:13:97:0d:b4:70:e8:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c203ea51-7816-4be1-beb9-d96318a7b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:5d:d1:d6:8c:ac:a2:a3:4e:17:f6:d3:58:
16:6a:bd:c4:f8:d2:8a:3c:6f:e5:f3:32:42:68:b4:
bf:d6:e1:04:c1:a2:24:f0:3a:b8:ba:f3:63:36:ea:
3b:1a:cd:ac:e1:8e:68:94:e6:cf:12:64:e2:d6:f4:
48:28:c3:5c:40:61:e7:35:f8:a2:ee:cd:45:f5:b3:
f6:a7:bf:c0:39:14:18:82:f2:f0:ef:fc:28:91:ab:
03:43:2f:fb:42:e8:92:55:02:4e:07:2f:20:aa:1d:
3e:e7:4c:e3:99:fd:44:57:b4:2a:b0:81:72:87:ef:
85:64:2a:29:2c:14:d3:53:73:d1:d5:aa:19:79:a3:
dd:e4:3e:bd:fd:ed:df:45:58:b4:e1:0c:ab:ac:af:
13:3a:4f:0c:41:b1:8c:c5:8c:b8:f2:9e:e6:79:53:
d8:f0:14:46:06:94:45:30:35:d8:81:d3:75:d7:c2:
81:99:7e:67:d9:a3:63:34:a9:06:32:a7:fd:4a:a1:
a4:51:be:e5:bd:6c:b0:c5:2d:17:12:db:b6:5d:b0:
a6:36:75:e1:11:89:91:57:0b:6a:4a:27:ed:80:c7:
db:ce:5b:7b:27:a4:b8:50:68:61:1c:16:0b:8f:76:
be:bb:90:a1:b2:b8:f0:02:1a:f0:c3:ac:7d:93:0b:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:45:AD:29:CE:28:9D:B6:1C:5C:52:0B:25:4E:31:52:DF:1E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af21ce91-2f74-3db9-8590-4d8b75d9fea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:28:e8:c3:e0:8a:75:91:06:79:1e:e7:4b:da:9f:d4:eb:1c:
6e:05:00:2f:66:e8:bd:b7:be:17:4b:e4:fa:34:a1:fd:08:b5:
0c:60:dd:a1:3d:60:68:95:cd:a6:3e:d5:c6:94:34:84:b2:e7:
1d:67:40:86:7c:00:7c:f9:0b:17:5b:ff:b5:9e:52:52:9c:1b:
c0:7d:a2:c3:55:68:4f:85:7a:ac:b1:71:bb:51:99:97:de:97:
3b:a4:4c:bc:70:b6:9a:78:77:af:e2:ee:73:e0:19:24:9c:d8:
bb:71:1e:90:0c:89:33:b5:03:2d:12:07:5f:d7:85:23:42:4d:
60:52:b9:4e:25:60:c8:e1:0d:a0:aa:4d:26:04:3d:bc:c4:d2:
3d:9f:54:f2:61:2a:99:79:b4:1d:5e:78:a7:36:5c:3b:81:13:
e8:d7:2b:39:3e:34:1d:bd:d5:41:10:89:c8:1b:e6:74:35:08:
b2:8b:33:fd:a1:16:0b:11:1a:ef:3b:1b:ae:59:d4:15:d5:8d:
a5:18:7b:49:44:e4:08:5f:a2:42:2a:68:9c:5b:5f:64:f8:36:
87:7f:19:6b:f8:b5:20:4b:fb:89:34:3e:15:e2:47:83:1d:5b:
99:76:fa:30:25:4c:dc:38:ed:a3:44:c5:a3:c7:8a:54:f8:ed:
93:64:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:13 2025 by rpki-client