Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af9393a8-336b-3f57-aa3c-8e5dd6136174.roa
File: af9393a8-336b-3f57-aa3c-8e5dd6136174.roa (raw, json)
Hash identifier: HBHIf0CclEL/sAql9Ds+4arpQmHXqlNjyvkVVj4gG0o=
Subject key identifier: 15:A9:3B:E5:17:18:1C:CA:B8:E6:CD:CB:0D:1B:9C:BE:49:48:AB:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80CC1C14DC75A14089ED2500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af9393a8-336b-3f57-aa3c-8e5dd6136174.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:cc:1c:14:dc:75:a1:40:89:ed:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=1c1c7a44-f682-4c2b-85ad-0f54c3b9ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:81:2a:cd:ac:3b:57:4f:74:a3:f9:b1:2d:
71:2d:98:01:9a:cb:04:ba:3f:5e:54:89:5b:fa:66:
da:4f:eb:df:16:56:85:82:6c:b2:15:5a:d7:ae:bd:
f0:16:e7:86:7e:74:19:aa:64:ae:c8:4f:8f:07:9b:
d7:87:c6:24:8a:91:5b:61:05:87:3f:23:85:ed:6d:
9c:87:b2:f7:82:2d:5b:71:99:76:33:40:ba:41:1a:
ad:a1:f3:4f:51:67:a8:10:02:bf:5e:59:05:42:d3:
72:45:90:ae:0f:bd:2a:2c:3d:cc:55:cf:ee:13:ec:
de:c2:2a:3a:3d:68:f6:2a:0a:d8:46:f7:70:cd:6d:
33:46:f4:42:87:e6:7f:2f:04:d9:8f:75:34:96:45:
37:2f:79:2d:60:29:6e:7c:12:4f:f4:51:1a:96:df:
be:c6:13:e6:7a:bd:de:29:fe:9a:90:ed:51:87:48:
a6:06:c8:be:50:95:1f:72:12:1f:50:02:f9:aa:ac:
15:84:3a:42:46:4c:c7:01:68:05:af:5f:50:56:ce:
f8:cf:4b:88:08:ac:16:05:bd:d7:e7:bc:79:0b:36:
6a:60:ab:96:48:b6:d1:00:41:cf:39:d0:77:df:be:
f9:68:79:6b:68:75:19:08:64:21:58:14:a0:50:f4:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:3B:E5:17:18:1C:CA:B8:E6:CD:CB:0D:1B:9C:BE:49:48:AB:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af9393a8-336b-3f57-aa3c-8e5dd6136174.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:f2:ea:0c:98:1a:21:9a:c0:59:f0:14:3b:38:7c:af:59:d2:
ee:10:7a:2a:68:1d:dd:b0:de:0f:4f:7c:3b:fa:fe:1f:b6:58:
e5:03:ac:55:7e:87:12:b1:e4:9a:e5:37:fe:b7:41:37:bf:38:
01:3e:bb:7e:d7:be:8e:52:8b:b8:ab:f6:4d:e5:44:f3:0a:7a:
0c:1b:d9:a8:9c:c2:09:3b:62:00:e4:77:fd:82:a0:bb:e3:7c:
3a:a7:bb:2d:ef:ef:78:a8:86:b4:3b:19:3c:7d:9f:37:c4:ba:
68:d6:0a:43:6f:81:d9:19:71:76:97:69:12:4b:e4:62:8f:9f:
9c:49:9c:f2:f4:3f:8e:06:5b:b0:0f:90:d2:20:0a:81:c3:2a:
ae:8e:41:9b:fe:d1:d9:fc:53:70:c3:f9:fa:60:a2:3d:b9:10:
f5:40:17:99:69:00:e2:70:5a:ba:8c:57:a8:71:05:3c:af:5a:
50:af:81:d7:71:85:59:57:33:10:aa:0e:33:a4:42:a5:6e:b9:
bd:57:4b:93:b7:fa:cf:41:0c:50:d5:63:dd:d6:12:98:b3:69:
f9:f9:e9:ed:82:52:a2:c2:fb:3a:4e:b8:40:84:44:0b:80:86:
63:f1:54:6f:e0:b3:c3:7e:54:df:f2:04:6f:5c:b5:2f:7d:51:
27:71:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:30 2025 by rpki-client