Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8b12ee0-33f4-3ca9-9fab-a75ca40cb217.roa
File: b8b12ee0-33f4-3ca9-9fab-a75ca40cb217.roa (raw, json)
Hash identifier: ukadJBwJEtIT/CbR8AunQyUrh6dbop14tqUDgpne1nY=
Subject key identifier: 2A:75:72:D2:81:28:08:7B:CD:6D:EA:6A:FA:9A:33:BA:57:FC:D2:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A779F0AC48C834AFD18C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8b12ee0-33f4-3ca9-9fab-a75ca40cb217.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a7:79:f0:ac:48:c8:34:af:d1:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=33c55bdb-e634-43dc-a7e4-6befa20ef5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:5d:4a:7b:96:e7:8c:86:9e:42:7a:b4:35:
d7:78:a6:65:a9:e6:16:20:98:97:30:76:ad:b0:05:
b9:a5:97:80:ac:63:b8:1c:2b:7b:e8:e6:b9:21:e0:
ad:6d:1f:e2:4c:3f:be:36:6a:ab:d6:aa:2d:9d:1a:
f5:91:e7:7a:3c:4d:dc:1f:d9:18:28:ac:00:42:ba:
ae:33:80:21:52:98:f4:6d:ec:16:98:33:c1:a0:67:
c1:6e:1e:40:67:51:4c:66:44:ce:0f:a2:e7:81:13:
4a:2b:4a:90:5d:33:31:45:39:45:44:6f:3b:0a:5c:
b6:ce:2a:36:94:20:fe:b5:04:37:fa:ab:8f:4e:7a:
d2:ef:77:dd:85:88:2d:4a:18:48:75:38:3c:57:fd:
0c:2a:da:ac:16:1f:97:69:fb:fa:a6:c4:12:2d:d0:
df:4e:81:8e:b0:b5:f3:d6:dc:d7:59:59:c6:e8:eb:
f7:fd:2f:2e:bc:80:2b:60:e3:44:39:0f:fe:a1:d2:
32:fd:e8:ee:24:e6:69:da:44:24:94:8b:36:50:49:
6e:9c:c1:6d:8f:51:c9:f7:41:da:77:40:95:e8:41:
c3:85:72:52:4d:72:b5:45:08:ce:2f:57:89:7a:92:
a0:69:0b:01:cf:76:42:70:8e:de:da:62:80:0c:8e:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:72:D2:81:28:08:7B:CD:6D:EA:6A:FA:9A:33:BA:57:FC:D2:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8b12ee0-33f4-3ca9-9fab-a75ca40cb217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:43:26:d2:37:b6:45:7e:39:8d:e6:5a:d1:57:83:05:0c:e5:
03:35:0a:b8:b5:b8:f2:36:5d:78:0d:eb:68:59:7b:70:8e:f6:
8c:c5:dc:90:ae:34:85:80:07:7e:52:47:03:84:95:3c:02:7c:
9e:aa:31:04:21:bb:4d:b1:5f:3f:b5:21:4d:3a:72:ef:b9:aa:
f8:09:16:c1:b2:ad:78:62:07:f0:e9:6c:d5:4a:47:56:4b:bc:
da:9f:1c:46:9e:3a:58:d0:db:ee:a3:3d:f8:af:e1:ec:84:c1:
95:89:b6:28:c5:11:86:7d:90:21:73:a7:e6:aa:1c:84:7e:af:
aa:34:d3:b0:b7:26:40:69:50:3c:ce:b2:c5:dd:05:e5:5f:a0:
70:0f:24:fe:39:2f:ac:07:53:fd:5b:82:1f:97:74:97:d1:d2:
dc:8c:ae:ba:43:10:5a:0a:62:71:fe:bd:ee:12:bc:a4:0a:6e:
a1:e4:09:68:95:53:5d:b4:5b:8c:52:50:64:a4:b3:4b:3a:b9:
29:a6:8c:26:4c:ec:83:2e:a2:50:bf:d2:e7:c4:25:fe:be:6d:
5c:c3:38:c5:03:72:34:c8:2c:eb:e7:a9:db:71:1f:38:ec:a4:
06:d0:e6:b7:da:54:8d:49:56:b2:e2:ca:1b:98:2d:ed:19:0a:
36:c7:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:55 2025 by rpki-client