Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfed25cc-a428-302c-9a86-2728fb33156d.roa
File: bfed25cc-a428-302c-9a86-2728fb33156d.roa (raw, json)
Hash identifier: KnR48ymbL2yMGIED9xhjrj6ntXiCJw9gndSIWe5tT+8=
Subject key identifier: 6C:77:3A:F7:2F:49:EF:CF:94:91:5C:A5:30:A0:1C:B4:DA:C0:F6:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA441A2613391F31E0E2E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfed25cc-a428-302c-9a86-2728fb33156d.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:44:1a:26:13:39:1f:31:e0:e2:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=6129ffc9-d06c-4eca-89fa-568d3f84db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:f3:e1:bf:d0:ea:7b:8a:aa:50:52:46:0b:
b9:95:28:01:94:61:c5:e8:55:6d:ee:cd:fb:7c:a1:
59:b2:ee:8a:33:e2:18:07:bf:c8:40:51:83:4c:20:
6c:56:2f:89:8e:bc:4b:86:2f:15:ec:29:b7:fd:3e:
05:bd:b4:02:af:c2:e6:08:16:b9:4f:00:45:9b:78:
38:d5:ce:19:a8:d0:bc:a1:5e:6a:3d:0c:32:71:79:
8b:40:2d:9a:b9:64:01:8c:d8:1f:f6:66:06:83:e8:
0d:7a:35:00:6b:03:4c:09:d3:03:86:00:f2:0f:05:
58:8d:2a:52:53:f5:c8:a9:4a:99:28:a4:b6:4b:6b:
82:1a:34:56:03:4c:e4:5f:69:1f:85:f8:03:17:c2:
7e:5d:b4:fb:d7:b4:b4:9b:86:1f:ea:58:72:01:77:
73:b1:b6:bf:0f:80:11:f2:7e:d9:ca:f6:3f:03:ff:
7f:1e:16:f0:63:3c:43:05:a8:b2:90:9e:bc:3b:ca:
66:5a:0e:f1:8a:4e:f0:74:f2:73:77:01:11:32:72:
68:18:5c:08:03:41:a2:a0:e7:a9:61:43:ee:95:c4:
99:a7:df:a6:dc:7a:d4:2a:21:eb:db:b7:e7:82:01:
18:f8:f4:4e:17:c7:9d:e6:b4:85:cc:8e:39:bb:8d:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:3A:F7:2F:49:EF:CF:94:91:5C:A5:30:A0:1C:B4:DA:C0:F6:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfed25cc-a428-302c-9a86-2728fb33156d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7e:6c:54:ed:aa:d8:da:ec:36:18:c3:9a:9f:ce:85:b9:d3:
3c:d1:8b:47:b4:df:45:69:8c:64:19:5c:30:7a:27:78:ec:b3:
ba:22:bd:a5:9c:c9:28:88:91:ad:6f:c2:47:2d:82:cb:f2:d6:
d8:cc:88:67:75:d6:5e:2e:16:31:9f:4f:09:b9:e9:d2:00:4a:
44:c4:9d:80:ca:af:80:00:f8:47:8e:8d:68:6e:1d:94:13:f1:
f0:e9:36:33:cb:c7:a2:3d:30:5f:f9:ef:b8:ee:af:b5:c3:3f:
04:3b:e7:4e:e3:3e:24:0d:9a:df:df:73:49:a5:bf:37:9b:a7:
36:3a:c0:1e:df:ce:09:5e:c9:e9:a4:6a:e2:03:54:4e:4b:a2:
7d:ca:90:0d:e5:a1:29:94:bd:e4:46:8a:5c:12:f4:03:81:f4:
4f:5a:bb:5d:c7:88:4e:f5:21:3b:fe:e5:be:d9:07:26:e5:fb:
1f:fc:c5:1e:fd:06:4b:36:aa:be:1f:9f:41:ec:13:f1:8b:6f:
e6:fa:b8:2d:f5:9c:5a:f9:ad:e8:ca:24:07:00:4b:16:ba:93:
1e:fa:59:a0:4f:41:dd:01:c4:92:a1:e4:ed:8e:fd:db:e9:60:
7b:09:d7:aa:51:3a:e1:20:2a:28:2a:ce:d0:4b:01:c0:f0:c2:
ca:0f:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:39 2025 by rpki-client