Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afbe3809-189b-3e05-a7b8-683aec9bbc4b.roa
File: afbe3809-189b-3e05-a7b8-683aec9bbc4b.roa (raw, json)
Hash identifier: B10CputQuE1KxO9etjQuJzIkdbnzSmxUIycSxnWdmN4=
Subject key identifier: 50:49:67:92:64:86:41:66:E7:45:90:E5:D1:18:F3:EF:8C:B1:54:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EC80090C8F7C4D578197600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afbe3809-189b-3e05-a7b8-683aec9bbc4b.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:c8:00:90:c8:f7:c4:d5:78:19:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=0c18c18e-e21d-4f6a-b8c0-534cab7bf503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:5e:d2:d8:89:ed:aa:9e:fa:82:a3:e9:76:
07:4c:1a:5d:11:3c:bd:69:1c:3e:95:cc:b9:75:d7:
28:70:5b:32:3d:c3:50:e0:0d:91:1a:ee:4a:0f:61:
b6:d0:c2:a4:1a:b8:79:7a:80:73:fe:c5:48:84:27:
4b:7a:ca:5e:af:93:53:de:72:10:b0:e0:34:7a:81:
22:32:e2:17:5b:f2:01:40:83:fa:37:7b:ea:ec:17:
d7:1d:fe:a7:d2:4b:fd:de:dc:2a:5c:df:e5:43:2a:
8b:a0:3f:cf:f2:2b:2e:0c:51:3e:ac:e5:23:a7:21:
1c:ad:36:55:22:77:7b:bc:b4:07:a0:52:30:1e:75:
14:e4:45:97:8c:76:ad:fc:d8:76:07:d2:bc:12:9c:
c4:d0:a7:f1:3f:e1:f9:3d:dd:1a:3d:02:57:96:a4:
29:40:77:a7:1b:76:8e:22:b9:be:56:af:04:a0:31:
77:3b:12:01:b3:7f:15:4b:21:96:7d:f1:b1:a3:55:
9c:66:97:c8:25:13:35:fe:4e:a9:6f:5d:f3:7f:a4:
60:c3:22:13:8d:45:ac:48:ee:ed:47:36:e3:58:42:
29:91:e6:89:94:51:5f:a7:94:5b:cc:d7:21:a4:98:
43:05:db:33:42:9d:27:ce:cd:ef:25:af:8e:45:42:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:67:92:64:86:41:66:E7:45:90:E5:D1:18:F3:EF:8C:B1:54:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afbe3809-189b-3e05-a7b8-683aec9bbc4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:a6:52:55:71:a7:2f:62:bf:3e:c1:5b:b0:00:87:1a:06:65:
69:8a:00:20:67:5c:c4:f0:6d:a4:88:67:8b:12:9b:fd:94:0a:
51:5f:13:a7:5b:74:a9:5f:da:9e:e1:a8:39:f9:27:cf:63:22:
cc:dd:66:bd:1c:06:94:65:77:5f:b5:cc:b1:d0:a3:d7:26:da:
98:77:b2:75:41:5a:2c:a4:c5:0c:9a:ac:f2:6e:ce:06:0a:42:
b5:49:c8:25:35:cd:5c:f4:c1:ce:29:80:2f:a5:51:71:66:95:
59:bf:e8:f5:ab:c0:22:c4:1d:21:a8:bf:c0:15:74:2c:90:ba:
76:d1:95:ba:fd:54:0d:6d:16:0e:6d:69:4f:18:2b:82:5b:cd:
06:8f:e9:ef:11:e6:34:4d:d4:53:b5:9e:ec:10:4f:68:ee:2e:
79:94:55:1a:c0:b7:52:7b:a0:3b:fc:2a:bb:b3:50:bb:e0:08:
b1:fd:5a:00:67:2a:92:f9:d2:09:cb:4d:5f:e7:19:9c:a5:14:
d8:04:f4:6e:d4:ce:b9:e5:6c:4f:cb:9c:d4:3f:d7:3f:dc:90:
5c:7c:4c:7e:02:ff:25:82:f0:52:76:f7:83:66:97:42:a3:4a:
c4:56:a0:ed:e5:33:ea:7f:cd:ae:3c:ab:a5:9a:0f:a4:ce:ce:
04:cd:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:56 2025 by rpki-client