Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf2fda8c-63e7-3865-b5b6-3913a8c87c93.roa
File: bf2fda8c-63e7-3865-b5b6-3913a8c87c93.roa (raw, json)
Hash identifier: hkljMnUIo4L1WxNNDTgsdgtB3sUiNpcQHRcLAZc4Lok=
Subject key identifier: 83:DF:22:62:FF:E9:C0:55:84:41:EF:40:B3:0C:B2:4F:D7:09:C6:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A7CF03930F8208C4335D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf2fda8c-63e7-3865-b5b6-3913a8c87c93.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a7:cf:03:93:0f:82:08:c4:33:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=9e87de7f-e1ab-4827-8387-64c6a3edf810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:a0:0b:06:4c:9f:31:71:5f:fa:f1:13:d7:
ce:38:e6:31:4b:2f:e8:24:9f:b7:8b:17:e4:c1:74:
dd:d1:fa:f9:58:8e:48:dc:b7:e7:fb:cd:3b:72:ed:
22:2c:97:74:25:8c:dd:2a:b9:76:6b:d3:f5:a6:e4:
d8:35:c5:bc:2b:b5:21:1d:72:0f:d8:a5:2b:27:73:
06:42:17:8e:41:94:06:ab:c2:e3:0a:22:35:e4:06:
4a:a4:ea:93:2e:f1:d3:24:85:ae:ce:3d:9f:8c:c4:
19:8d:65:ad:9c:8f:fa:0e:d1:74:7f:3f:9e:e4:38:
a0:46:8e:01:f1:05:db:51:84:79:ce:77:73:ab:af:
63:12:e6:64:ca:40:35:b9:6b:45:18:90:fd:83:f9:
59:87:2a:77:82:41:74:73:f4:fa:96:a1:15:dc:95:
17:1f:31:ca:ab:89:0b:57:a4:89:33:a6:11:59:8d:
73:6a:85:55:62:81:0a:df:50:51:c8:6d:f1:c8:a0:
7b:3f:8e:f6:7f:c3:5d:9e:84:d3:eb:ac:26:52:5f:
d2:ba:f4:80:b2:4b:c3:c3:58:f2:9b:79:31:b1:47:
4a:78:8c:0c:4d:ef:ce:cf:56:f7:83:b1:c6:b3:b6:
c1:71:7a:73:f2:08:50:68:31:2c:78:6b:36:ca:e8:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:22:62:FF:E9:C0:55:84:41:EF:40:B3:0C:B2:4F:D7:09:C6:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf2fda8c-63e7-3865-b5b6-3913a8c87c93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:48:f8:39:fb:fe:f2:5d:5d:9a:a2:68:02:35:40:f0:70:2e:
0e:00:4f:ab:34:75:74:2e:8c:a6:21:ac:23:31:8f:78:b9:cd:
5c:8c:59:63:f5:6f:c5:f6:f3:81:fb:7a:df:9a:c8:85:da:8b:
66:91:8d:9a:7f:9a:51:bb:33:e5:ce:64:ae:10:ea:58:85:27:
12:83:db:6f:da:50:0a:0f:df:87:47:7e:33:8a:bc:e2:db:dd:
e7:aa:f5:ac:f9:8b:95:84:f8:aa:f1:2b:45:40:e0:91:33:7e:
04:13:aa:79:21:16:bb:05:fa:4d:57:9a:40:26:00:94:ba:56:
19:d4:37:a3:c6:0e:ca:6c:d0:38:d0:20:45:48:c2:aa:eb:88:
fb:49:7f:96:26:ad:93:f9:d4:2b:87:66:b8:22:c9:81:3f:23:
84:7a:59:43:3c:8b:1f:bc:2b:80:5d:51:e9:6a:95:a7:81:49:
09:f9:0f:e1:41:4b:18:d2:15:7a:3c:c0:b4:a1:4f:5d:98:b0:
2f:c9:76:75:a6:87:5c:63:f4:18:01:63:3c:47:ec:fd:bd:3f:
bb:67:a0:f7:dc:01:b8:cd:2f:8e:1b:20:d1:e0:1f:0b:8b:e1:
65:01:01:cd:15:72:19:fb:a8:0a:04:46:60:20:71:e1:07:8b:
71:90:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:28 2025 by rpki-client