Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baf45d36-7282-3438-8745-17a82f9f31d5.roa
File: baf45d36-7282-3438-8745-17a82f9f31d5.roa (raw, json)
Hash identifier: Hb7ShD4Sv9X5UhiXOaMPxfqMjzWGo8QokeWneLPnMgA=
Subject key identifier: BC:6D:D6:D5:C8:6E:41:8D:06:DE:C5:04:32:ED:0F:00:25:11:95:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E92450EDA9B9CC423FD059980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baf45d36-7282-3438-8745-17a82f9f31d5.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:45:0e:da:9b:9c:c4:23:fd:05:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=7432ea6a-b83f-4cdc-a514-f75aa89d5880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:0f:20:c0:0a:45:c2:ba:0c:b7:f8:ec:99:
0b:7d:48:4c:b5:bc:43:96:86:ba:08:8e:6c:79:c6:
71:8d:ff:db:be:53:a3:02:ee:2e:0c:ec:12:1d:6d:
26:54:fb:ca:04:70:96:a5:67:e3:1c:3e:20:2e:f4:
df:a3:a2:e8:5a:37:03:ca:bc:ee:45:15:3e:48:4f:
35:1f:e4:2a:d0:b9:4d:2d:d0:cf:c3:fa:fa:5c:53:
34:28:f7:00:b3:4e:5b:1b:59:5d:69:59:cb:f3:88:
a9:f2:9a:bc:ed:c8:5d:cd:d5:3a:4c:59:78:c7:7a:
00:e9:d5:4c:49:2f:40:02:39:da:0e:58:2b:0f:f7:
27:40:30:ba:88:ec:94:7f:6d:58:34:ba:11:b7:81:
b8:03:0a:2a:03:c3:4b:76:e4:6f:a5:15:1b:b9:c0:
96:43:ef:24:9d:5c:14:ff:a4:b0:84:49:e0:28:f3:
49:4c:ae:ad:ba:11:96:1a:65:61:09:f3:35:9a:9a:
90:54:66:80:62:5f:b8:0a:f8:b5:db:29:85:1a:a0:
99:ce:2e:ff:b4:a7:65:ab:a9:32:24:82:10:8f:0e:
d3:65:9f:96:44:8b:3a:9f:05:03:4a:38:6a:7b:f1:
ec:c5:48:42:7b:9a:1d:4d:b0:81:cc:57:48:a9:7f:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:D6:D5:C8:6E:41:8D:06:DE:C5:04:32:ED:0F:00:25:11:95:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baf45d36-7282-3438-8745-17a82f9f31d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:3f:31:6d:54:71:32:cc:4f:94:35:f1:5b:a9:f3:11:ff:d0:
d0:08:fe:61:03:ec:5f:bd:e7:e8:29:98:3e:81:f3:d2:2c:5f:
2e:ef:a7:41:cd:f4:33:8c:04:bf:79:dd:42:8d:5f:be:ff:b2:
da:98:25:59:14:5d:21:fd:4e:c2:72:6f:59:c5:74:02:81:f5:
5e:3d:63:74:75:19:b6:1b:f4:23:f9:db:c7:18:a1:88:b5:d3:
65:81:26:5f:12:ef:90:e3:eb:7f:a9:a6:5f:e3:34:2b:af:db:
26:50:3c:7a:53:02:f4:0c:fd:ad:01:87:56:ad:a8:12:b0:bf:
1e:77:c4:ba:bb:dc:f4:a6:c6:63:85:49:df:71:a0:4f:ec:f1:
cb:3d:10:af:32:c9:05:2d:43:cc:f8:81:01:4f:ca:62:1d:b8:
4e:da:3b:50:13:35:6d:08:bd:1a:03:bb:7c:2c:56:e4:58:68:
e3:f6:98:92:12:5a:f7:ae:dd:09:2c:d6:d6:48:b3:f4:a7:46:
30:1a:ca:b0:c3:22:9f:8c:d6:12:52:29:1c:72:55:df:71:84:
08:c5:73:05:57:31:3f:0c:90:c4:22:d7:d9:d3:96:a8:83:c5:
c2:e2:51:42:b5:87:ca:f5:16:05:d4:81:55:d2:1c:4f:af:65:
43:b1:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:58 2025 by rpki-client