Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b627626f-ef83-3168-aa5e-360a99bba0ec.roa
File: b627626f-ef83-3168-aa5e-360a99bba0ec.roa (raw, json)
Hash identifier: WWk7QD4o859ED7+GWYQ/IdmSEYOKrqwM709lXgVUucQ=
Subject key identifier: 3C:EF:47:D8:2F:7E:98:2F:DA:D8:AC:DF:B6:40:3F:A3:11:2C:4C:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D79ED299043A448F07E8F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b627626f-ef83-3168-aa5e-360a99bba0ec.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:79:ed:29:90:43:a4:48:f0:7e:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=b27f77de-cf96-48d3-8f52-fc46ec2379e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:00:5b:0e:15:77:ad:04:b8:26:87:4b:7e:
47:4c:6d:01:17:0c:c2:31:7c:c7:d5:e9:57:67:cb:
41:fa:66:05:01:35:5a:1b:1b:38:85:cc:8b:4f:16:
c7:ea:5e:30:df:f2:42:f2:04:12:29:0c:80:54:9b:
b8:a2:02:43:0c:53:37:f9:25:37:79:83:ce:45:18:
0c:8b:3e:d5:bc:0e:3b:34:50:c3:fb:9f:ff:dd:1f:
20:30:ac:cd:a0:55:09:0f:1b:2a:02:21:13:58:ba:
a8:49:c5:b1:1b:21:b5:09:a4:f9:57:bd:48:ff:85:
93:ad:f3:30:84:39:65:e9:60:49:04:db:eb:b8:1a:
11:e8:58:4a:f5:43:f4:f5:14:fa:d4:e9:74:aa:fb:
14:b1:48:bc:cc:98:b4:f9:b4:10:8d:13:b5:21:7c:
34:d4:ea:a3:6a:70:9d:ac:be:46:92:3c:cf:84:7f:
78:f3:23:17:57:2c:67:0a:57:4b:df:45:05:4e:98:
61:21:d3:5d:55:b2:5c:ec:d5:b8:36:71:e8:82:e9:
36:33:8b:ee:0e:91:87:c6:ee:f8:b8:7d:d6:00:83:
02:27:90:8a:9a:01:25:8b:18:ab:d1:00:9a:c1:8d:
8b:4f:ee:e3:90:a4:00:4b:77:40:4b:f8:14:42:ed:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:47:D8:2F:7E:98:2F:DA:D8:AC:DF:B6:40:3F:A3:11:2C:4C:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b627626f-ef83-3168-aa5e-360a99bba0ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:0e:82:d3:f0:d5:e9:00:e5:c0:e5:e2:19:23:c3:50:5e:1b:
00:71:ea:5a:72:6e:b2:61:21:cf:9a:02:ca:bf:35:b5:82:dc:
40:91:3a:d8:68:f9:03:1e:03:f9:07:2e:d4:7a:c7:67:27:f8:
c2:25:3b:51:8b:b9:00:2b:35:f3:3b:73:a8:14:3d:1c:c5:a9:
1c:e0:ca:0c:2c:5f:73:34:9e:27:15:a5:a0:09:54:d8:31:ad:
13:ea:38:b2:c3:18:47:c0:b2:d9:5e:2a:55:7b:56:f6:cc:93:
0b:f9:68:44:bf:8d:39:bd:f5:40:f4:0c:88:55:7f:e4:74:d6:
a0:d9:fe:3b:cc:d2:a7:f0:ff:e0:48:4c:2b:bf:48:2a:44:e6:
77:ac:af:3a:04:2f:fd:b1:f0:97:af:9d:92:18:91:9d:6b:10:
93:dc:95:a2:47:5a:61:1a:f0:22:ea:13:fe:e2:d4:65:28:3a:
a3:ea:e0:f9:80:72:fc:24:0d:b3:ac:f3:82:29:9d:8a:03:66:
ed:db:b0:ce:d0:1e:92:3e:b1:bf:e0:1d:91:00:0f:31:b9:b0:
f9:cf:03:e1:2f:66:ca:e5:25:55:2d:96:1e:d8:b6:9c:fb:e7:
e4:cb:f4:7c:54:56:40:44:53:62:d3:21:78:2e:d5:cd:1d:2b:
50:9f:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:46 2025 by rpki-client