Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff812c7-3664-3708-b21e-7badc3e58186.roa
File: bff812c7-3664-3708-b21e-7badc3e58186.roa (raw, json)
Hash identifier: eVgPqIJUkrEovhjXyvBjOSzwNehDogl7z51MjoifRMU=
Subject key identifier: 8A:9C:6C:92:5C:15:5E:D5:E6:DE:0A:0E:B9:3A:28:31:C3:5D:80:AC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CD0E811517C6F4A750AE480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff812c7-3664-3708-b21e-7badc3e58186.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:d0:e8:11:51:7c:6f:4a:75:0a:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=fd7d61d4-f6b1-4ec2-9a97-97d56024c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f8:bc:e6:a7:a8:41:0c:e3:9b:87:9a:45:c6:
ed:de:c8:14:56:06:e5:50:ba:f0:4e:2c:32:a0:c7:
39:35:2f:70:8b:71:37:05:c9:24:f4:f1:0c:db:72:
4e:78:93:14:90:7e:c5:f5:65:c4:86:b7:8e:03:57:
b7:ff:0b:ce:f3:74:a0:e2:26:7e:41:24:d9:1c:c8:
a3:e5:79:93:e0:d1:83:ea:34:43:e7:a2:c1:e5:70:
63:9c:dc:b4:4c:56:83:3a:05:ae:7d:8f:4b:73:95:
53:7e:4e:a3:d5:da:57:1c:3a:95:e6:dc:c0:f9:76:
68:67:38:15:b4:db:14:47:b0:ab:b6:62:d0:06:49:
62:d6:d3:51:6c:6f:9b:02:dd:a4:bc:8c:86:7a:4b:
a1:33:23:5c:8a:29:14:3a:c4:bd:85:2b:af:90:e3:
de:aa:86:87:a1:5b:12:80:b1:ce:1e:1f:00:24:52:
44:18:b2:d5:6b:0c:4b:d1:2b:34:05:83:bd:61:d8:
ff:9b:8f:e1:62:a4:0b:92:7b:e6:7c:59:58:71:7d:
36:d7:08:73:eb:1e:d0:91:3f:ac:92:cc:50:18:bf:
fc:81:23:fe:b1:24:8c:7f:b7:ef:c2:9d:64:89:79:
38:df:70:67:be:03:a7:52:43:ea:83:41:23:7f:ed:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:6C:92:5C:15:5E:D5:E6:DE:0A:0E:B9:3A:28:31:C3:5D:80:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff812c7-3664-3708-b21e-7badc3e58186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:56:9d:30:9f:f3:87:5d:46:21:09:e7:f7:c2:8a:90:1b:a1:
ef:1e:d3:93:94:bf:68:aa:ca:2a:9d:e0:68:a0:b1:96:39:d6:
17:4c:da:31:88:f3:42:5a:9b:32:8c:cf:04:4a:fb:ae:6c:45:
51:bb:b6:4d:14:3d:ee:85:a2:48:e1:05:4c:db:c8:67:04:1e:
d1:c3:cd:d7:db:7d:c9:67:46:17:8a:13:84:66:23:f7:8d:3d:
f7:9f:bf:58:7d:9f:4d:63:a5:38:38:aa:5b:77:fe:1b:cb:99:
25:77:ce:50:34:4e:60:96:d5:5a:36:27:ee:23:09:1a:62:b1:
50:39:ec:16:a4:a0:28:b5:a5:8a:f9:3c:53:c1:90:bd:57:c4:
c7:20:ee:b1:39:dd:cf:56:67:e8:46:da:2b:f5:bc:a3:ae:10:
4e:6a:b8:b8:50:fd:94:0f:a1:8c:84:23:2b:ed:b5:2a:17:86:
cb:0a:55:89:e8:34:92:6f:b3:18:61:a7:60:25:ab:a2:fc:ae:
e0:b2:15:ec:20:01:bc:04:5d:c5:1d:f9:69:06:6e:44:65:4f:
51:9d:a2:cc:33:f2:04:c8:cb:62:e2:47:f1:6b:11:be:8b:d6:
55:52:e3:e3:87:2c:66:e2:b8:93:18:cc:53:d2:bc:79:79:c0:
5f:36:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:41 2025 by rpki-client