Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af891b43-0f05-3a7e-a1ee-6514608dda95.roa
File: af891b43-0f05-3a7e-a1ee-6514608dda95.roa (raw, json)
Hash identifier: irkdq2Py9/WyQcKaIc4Q9LDUYIciggdNpTzPRc1ruk8=
Subject key identifier: 28:93:F7:E1:20:FC:E3:64:2C:16:0D:8B:8A:E5:F8:50:4E:21:A2:52
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DACBC9C4584E5BF4EA686B940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af891b43-0f05-3a7e-a1ee-6514608dda95.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:bc:9c:45:84:e5:bf:4e:a6:86:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=99342c8c-e2c2-49af-8181-60619083c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:ab:2b:57:72:cd:af:4a:4f:4f:78:e7:02:
b4:a1:12:31:ab:19:47:af:e4:e7:6a:fb:09:89:9b:
83:27:8d:9c:29:99:4d:d8:5b:9d:31:ac:19:3e:83:
00:50:7f:23:14:fc:e3:82:08:73:68:f9:ce:d4:b7:
c3:7b:31:90:4a:df:b7:b5:c5:82:95:f6:e9:56:66:
be:9d:cd:78:cf:da:dc:a5:d1:2e:86:32:5f:f6:73:
7a:6b:87:b1:b8:8b:0e:06:3c:67:c6:6a:d7:43:79:
7d:fa:f4:78:b0:99:4c:3f:87:ec:10:74:74:be:47:
2c:4f:a9:e4:45:f6:29:90:b2:3a:b3:39:1d:cf:4c:
d0:7e:d3:00:28:2f:c4:ad:c7:21:8e:fc:68:4f:94:
04:08:6f:5b:72:76:24:c4:7d:ee:05:c9:c7:cf:d8:
8f:c1:3a:97:d1:95:47:84:fe:8e:57:07:3d:23:50:
62:b5:42:bc:8e:64:00:96:52:e2:a9:22:21:82:ea:
0b:55:87:15:6d:71:5f:ff:21:ea:e0:9a:47:15:d8:
46:4e:48:fa:43:a1:c2:bc:a6:d1:cc:1b:71:c3:1d:
32:e6:92:8e:20:68:ae:d2:d3:b2:eb:ef:47:02:2b:
fb:29:55:7f:f6:cf:2c:e4:73:93:31:4d:cd:ec:b6:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:93:F7:E1:20:FC:E3:64:2C:16:0D:8B:8A:E5:F8:50:4E:21:A2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af891b43-0f05-3a7e-a1ee-6514608dda95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:0e:a5:45:98:0a:2c:5f:8e:3c:34:25:32:0a:5d:fa:21:8b:
cf:05:31:a2:ff:80:51:e6:8c:30:3d:e9:8d:2e:2f:8b:11:46:
de:49:73:47:a0:85:3b:a6:04:f1:dd:59:49:15:9c:27:17:eb:
b8:cc:ea:41:61:00:3d:5c:20:c5:61:66:ac:42:0f:9e:7a:c6:
59:be:7a:6a:e3:74:3d:de:e8:0f:32:4f:16:2c:7f:cf:3c:27:
21:8a:a5:c6:ab:fd:39:74:d9:99:9e:7e:44:bb:a0:9e:3c:2f:
a6:d8:0f:12:b3:9d:e7:b2:e3:bb:0d:df:dd:de:bb:9c:4e:96:
2b:40:f3:73:ed:e2:2f:6b:d6:62:07:35:35:27:46:15:4c:87:
1b:5f:14:58:20:7b:19:01:02:cf:4a:3a:2f:4a:52:0e:ca:78:
0c:b1:10:b2:c2:c3:b0:cb:5e:de:a0:e9:35:50:21:18:94:e2:
8b:ff:e0:5e:85:d8:f0:ba:5e:7b:ee:82:7f:f0:bf:99:88:56:
a4:bf:40:1b:d4:59:8f:7c:0d:ef:38:3d:28:6b:4a:9f:7f:a0:
70:a4:65:51:9b:b2:09:68:f0:d5:3c:ad:fd:96:42:79:d0:29:
47:93:57:2f:d3:dd:0d:e0:63:b5:cb:f4:d4:71:37:22:ef:88:
cb:f6:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:54 2025 by rpki-client