Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af2f1d35-917c-38c5-9e46-b7098b460236.roa
File: af2f1d35-917c-38c5-9e46-b7098b460236.roa (raw, json)
Hash identifier: smQJvC6/ShddDdHKyQMwBHW5SMT+ngtmC4xIlt+gyYM=
Subject key identifier: B1:B6:3B:E1:F7:1E:4F:A6:9E:E9:A6:41:71:69:8F:DA:EF:61:62:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E440B3D3ACEA7F6F9DEF73B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af2f1d35-917c-38c5-9e46-b7098b460236.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:0b:3d:3a:ce:a7:f6:f9:de:f7:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=52162f99-9493-44c3-bd66-7338de3aab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:c2:96:74:b4:b1:3a:76:f6:ea:88:f0:50:
26:e9:14:09:cd:33:9a:60:59:f4:33:00:a2:87:91:
67:e5:ad:9f:84:3c:8a:a4:4e:ac:33:13:d2:aa:45:
10:5a:e6:66:c1:56:2c:6e:11:e2:ea:d9:05:15:50:
d5:8a:30:7d:e1:c7:e1:4b:6c:d6:6e:6f:a3:ef:c1:
7a:c8:7e:85:a9:e4:f5:67:27:93:82:61:5b:86:df:
94:ae:a4:a9:ad:45:13:1e:a9:cd:ef:7f:12:1f:de:
1d:f5:d3:0c:08:f1:d3:8b:8c:07:c8:37:82:d7:7f:
9f:25:36:6d:62:62:3d:7b:53:a0:97:7a:f4:02:8d:
e0:58:64:e7:ce:d7:66:1a:b4:7b:5f:18:7b:37:4c:
fd:6c:81:01:12:61:a4:c1:a2:31:a3:d8:a8:08:79:
e1:b1:cb:8a:c5:a8:b5:11:73:06:23:7d:d1:99:57:
9a:6f:a4:45:8a:37:89:e1:27:8a:ba:32:43:35:b4:
68:27:07:3c:f2:16:bd:bf:5d:73:4a:05:02:dc:37:
ca:1a:98:0e:16:df:2a:2b:f1:52:df:ff:f1:f6:1a:
b7:8b:d3:d8:29:e4:9d:57:77:28:87:41:a4:fb:db:
0d:ba:67:0b:b6:93:6c:b8:70:56:dd:ae:d0:8a:cd:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:3B:E1:F7:1E:4F:A6:9E:E9:A6:41:71:69:8F:DA:EF:61:62:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af2f1d35-917c-38c5-9e46-b7098b460236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:90:33:b8:40:05:12:e1:2a:fb:0d:5f:44:a2:21:17:c2:fa:
fb:1f:a4:f1:92:0d:ff:f4:59:41:cf:58:42:3c:24:dd:f2:60:
e2:d9:92:c3:ac:34:b3:df:8c:e7:2c:da:7a:ec:40:27:71:b7:
67:6f:78:53:69:b0:e1:fb:f3:9a:f3:6f:41:a4:db:c4:4e:5a:
eb:10:2f:18:20:d8:2e:3c:24:b5:71:8c:01:0d:ff:eb:87:84:
43:fd:d9:fb:12:f8:81:9a:53:10:81:55:20:e7:33:83:39:dd:
04:ae:8f:cc:20:38:a1:92:2c:04:2a:3e:70:75:10:2f:5a:f8:
30:ed:87:08:ad:2c:7e:5f:e4:99:e7:5c:6c:46:c7:82:bb:b4:
5d:ed:bd:5c:8b:1e:4c:46:0f:b0:9b:cb:58:3b:49:ad:f3:58:
fa:b2:31:76:7c:76:7e:c0:c3:af:44:7b:0b:b1:d2:e8:c3:a9:
c4:10:ef:33:34:81:9d:55:88:a1:77:d7:5e:14:9f:fa:85:75:
f9:a5:5b:fb:80:07:32:77:d4:dc:93:23:e3:7f:dc:f0:6e:23:
6c:0a:c2:a0:12:26:c6:5d:c5:44:e5:86:a7:4c:08:82:bf:6e:
97:58:5f:da:6b:34:bb:08:02:4b:9e:26:60:c2:3e:0a:ce:3d:
66:7c:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:59 2025 by rpki-client