Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b86572c9-56f5-3744-bbf7-af2a6a2381b8.roa
File: b86572c9-56f5-3744-bbf7-af2a6a2381b8.roa (raw, json)
Hash identifier: O3M8hfH9PQ9mZeSZrSLm0bEujSMbeVwIjRBRQ55ZMLA=
Subject key identifier: 05:EC:2B:FF:94:45:54:16:7E:78:72:CE:B6:20:BF:18:1B:AD:05:81
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A37B58BC7BE2A3D54C3CBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b86572c9-56f5-3744-bbf7-af2a6a2381b8.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:37:b5:8b:c7:be:2a:3d:54:c3:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=e01d3681-e8ba-4c1d-ba68-1990b80f8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:d3:96:b3:ae:64:f1:17:5f:5d:73:ff:7a:
9a:79:7e:6f:9e:c0:31:3c:bf:b5:bd:e5:a6:e1:20:
54:0a:bf:4c:24:a8:ad:d3:13:3d:3a:6a:72:10:0a:
d3:2a:61:37:24:3f:ff:43:3c:30:68:ea:07:cb:ee:
4e:cb:85:80:1f:60:59:20:b8:d2:1c:ff:a6:47:d2:
7e:dd:0a:03:18:71:58:50:5b:af:a2:1f:43:bd:8f:
79:f0:f3:df:bd:9c:c0:bf:97:91:34:ec:c6:cb:7a:
47:31:f8:db:6a:32:e7:96:2d:42:4b:7a:70:56:7d:
6e:f1:a7:0b:ec:c7:94:ec:a3:96:91:04:f7:85:78:
d3:0b:bc:6d:12:a8:2e:29:dd:56:eb:56:40:7c:6d:
4a:42:b5:50:46:df:fa:d0:b6:f6:e6:92:98:d9:26:
e7:99:47:80:31:65:c4:bc:bc:25:66:81:66:8d:c2:
1f:cc:f9:72:d6:7f:b4:17:34:f7:0a:72:63:04:cf:
ed:a4:e6:80:a9:0f:d2:c3:90:23:8c:b0:22:a3:25:
27:1a:88:17:87:c5:a6:66:bd:f0:5f:98:31:eb:50:
fb:cf:a1:df:ca:b6:ee:23:e7:0e:5d:bf:27:cd:05:
da:fe:b7:40:5f:b8:a9:46:9d:66:0e:6c:35:3f:13:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:2B:FF:94:45:54:16:7E:78:72:CE:B6:20:BF:18:1B:AD:05:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b86572c9-56f5-3744-bbf7-af2a6a2381b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:99:45:57:5b:ff:6f:f3:94:55:69:70:41:9f:6e:e9:54:45:
2e:cc:31:2b:fa:b9:b2:12:b6:90:94:b4:73:6c:db:f0:99:59:
da:83:a1:7c:35:2f:b6:3b:53:1a:c0:95:d3:9e:3a:1f:01:e5:
4b:4f:57:2b:a1:bb:7e:90:ef:aa:41:42:72:0a:91:3d:e1:2e:
93:f6:45:11:b0:ca:7d:5b:a5:a9:17:0b:e5:43:37:9c:11:b0:
7a:41:09:19:81:15:68:32:ed:a5:3a:85:df:58:d3:85:d2:1b:
f2:5f:de:8e:36:b2:b9:ba:00:72:3d:35:54:0c:d7:89:fa:c3:
2e:6e:e2:e9:c3:7c:80:4e:1c:0a:9a:97:98:e4:d0:b0:3b:f1:
7f:e5:eb:04:57:4a:5c:bb:a3:7e:bf:63:73:c0:be:21:01:16:
25:e6:f7:82:ab:63:7f:ae:e3:3b:e9:7a:15:6f:14:21:4f:4c:
f7:ee:3f:04:e1:9c:58:89:26:ab:6c:72:da:8e:90:f7:30:00:
14:e0:55:6d:f2:da:27:75:6c:d6:4f:11:77:8e:e2:e8:d5:81:
1a:6b:11:03:61:e7:ac:0d:be:10:97:fd:3f:57:b3:c6:d9:d8:
a1:87:50:b5:c7:9d:f3:18:49:b0:bb:72:a4:0d:43:c8:59:04:
15:c8:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:45 2025 by rpki-client