Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8de33b1-78d7-3178-ad77-0b24d0fb996c.roa
File: b8de33b1-78d7-3178-ad77-0b24d0fb996c.roa (raw, json)
Hash identifier: oBVooHxjATZVRaxEW9Ltq+6qWfJziuVc+W1qyzV4uEw=
Subject key identifier: A7:A2:1F:9D:C1:0B:D9:00:10:F6:3E:BC:DB:40:89:9A:2F:68:90:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E21DF990544B1CBC894FC5B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8de33b1-78d7-3178-ad77-0b24d0fb996c.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:df:99:05:44:b1:cb:c8:94:fc:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=597e7967-368b-427a-a786-cad019b8401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:5a:e4:16:03:8f:c0:45:d4:48:26:58:d9:
5f:a2:b4:68:07:f0:e0:a6:14:d7:0c:03:e9:97:91:
68:99:50:54:79:6c:87:3b:99:f2:17:d6:03:71:a7:
8e:6a:d3:f7:ee:5c:de:90:8e:eb:b5:ae:f0:2b:08:
5d:d5:fe:5c:51:c0:3f:40:3d:cc:3f:cd:3f:8c:e1:
ac:ad:af:15:68:32:59:4b:43:8e:17:28:ec:0f:df:
3c:23:f0:cb:75:19:b9:1f:54:da:16:47:63:d9:1f:
86:21:a9:92:d5:75:68:ee:74:2f:f4:72:b1:4f:7b:
2e:80:6c:05:19:3b:21:44:45:d3:81:b7:fd:78:b8:
67:cf:80:04:1a:03:27:db:d8:86:89:84:2e:7d:1e:
2f:1c:ce:df:c8:d4:ca:96:d2:5f:83:d1:35:0f:2c:
af:0b:09:fb:f5:07:7d:67:4d:8c:21:9c:46:3a:6b:
76:72:df:bd:e1:f5:6d:a3:9e:72:45:05:4d:2f:b0:
a1:9a:bd:a0:a2:0d:c8:64:cd:e5:63:5d:e4:3c:49:
f7:65:ad:9b:1e:4a:45:a5:ab:2e:98:df:74:aa:f5:
21:00:1e:36:99:c5:2e:39:ba:1c:b3:63:75:ab:24:
06:75:bf:63:6f:7e:b6:96:83:1c:d1:6e:33:ba:7a:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:1F:9D:C1:0B:D9:00:10:F6:3E:BC:DB:40:89:9A:2F:68:90:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8de33b1-78d7-3178-ad77-0b24d0fb996c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:24:64:f8:db:dd:d6:d0:58:43:4a:d2:54:02:5b:23:b7:a9:
cf:7d:0a:70:ae:bf:12:1e:d2:52:f7:51:10:ca:3e:a1:59:df:
15:01:c7:99:c8:0d:72:bd:27:e5:7f:b9:15:50:80:69:c4:3c:
a7:33:fe:2f:9b:dc:80:ca:76:eb:1f:3a:04:b5:0a:09:a2:6b:
be:ba:c7:49:b7:61:1e:d1:6a:ea:b2:32:69:cb:21:0d:21:95:
1b:54:18:21:53:5e:cf:3b:05:cc:10:9a:0b:6a:9b:fc:18:1c:
b3:f9:59:18:d8:12:f3:39:45:5a:fe:c0:08:c2:47:76:12:3e:
f6:51:f6:3e:e4:78:0c:6e:8e:83:f8:18:04:f1:f0:e8:6f:52:
35:cf:f4:ba:18:ab:3c:eb:5c:cd:8c:b0:17:1e:53:4e:56:dc:
67:cf:d9:03:cc:8a:90:9f:d7:a4:65:eb:78:5d:79:e3:1f:78:
d8:14:a9:5f:a2:e1:3f:e5:a9:f6:a2:9d:83:47:61:6c:38:76:
d3:e6:1d:e7:64:e4:7e:9e:5a:76:76:7b:27:da:da:98:32:42:
0f:7c:dc:18:b1:92:67:4b:82:36:d5:0a:08:f1:02:2e:ec:88:
35:bb:e1:a5:38:87:f3:37:04:17:3d:8d:15:e7:5e:70:11:7d:
29:dd:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:52 2025 by rpki-client