Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3dd93b2-aa59-32b1-8398-8e72f50f5375.roa
File: c3dd93b2-aa59-32b1-8398-8e72f50f5375.roa (raw, json)
Hash identifier: arwrmaWQdg9yzxjMJC8Xx/5/49fuyBh/q9M7W8PCPzI=
Subject key identifier: 5C:AF:B1:46:7A:67:14:53:4B:D0:7E:24:81:39:1C:4B:F1:27:10:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CF5F1E79D282874ABA63A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3dd93b2-aa59-32b1-8398-8e72f50f5375.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.88.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:f5:f1:e7:9d:28:28:74:ab:a6:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=61d863cc-f2f9-4ffe-8a58-faf98465dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:0d:2a:da:c0:ce:56:81:17:65:c6:87:2c:
92:a8:9f:33:67:12:c1:33:c2:e5:3a:05:2f:6e:f4:
52:40:14:dc:09:9f:86:fb:d7:e5:33:81:70:bc:08:
13:d6:25:18:8d:1f:ee:53:bc:fa:fc:2d:28:7b:5a:
9f:d2:d9:3a:19:db:6a:7d:3f:22:16:7b:10:23:ff:
9e:c3:94:db:f8:56:4e:a4:ff:b1:0d:3b:8b:56:61:
97:e8:66:1a:80:93:a3:9c:b5:e6:ea:2d:e8:c5:56:
f4:f7:ba:51:1a:0e:aa:7b:fb:0f:6b:8a:89:3f:7a:
8e:25:1c:08:89:fb:f3:d5:ab:55:64:0f:f5:79:9b:
16:1f:f0:13:8c:00:65:ab:2f:4c:ea:5d:22:40:53:
30:99:86:bd:80:10:fd:e3:6f:3c:0a:19:5c:17:ee:
7e:0c:4e:7b:73:d7:b2:b8:db:95:3d:85:23:57:f0:
90:3e:a8:74:19:2c:db:16:d0:4a:91:f5:39:65:43:
8e:53:8e:7a:23:93:88:16:51:4b:cd:fa:73:24:18:
e3:aa:61:67:de:69:65:78:f5:c1:ed:c1:fd:1b:1e:
c0:b2:7a:2a:2f:19:93:e9:4e:f3:95:00:e7:87:9d:
32:16:84:8d:42:b9:8d:d7:0a:fa:ee:8b:ca:a0:dd:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:B1:46:7A:67:14:53:4B:D0:7E:24:81:39:1C:4B:F1:27:10:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3dd93b2-aa59-32b1-8398-8e72f50f5375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:4b:f0:03:23:31:7c:4b:82:30:a4:2e:3e:69:ff:e9:ea:5a:
87:78:29:ad:13:5e:4d:f6:e0:77:a0:cb:7d:5b:bc:a0:26:a9:
21:c1:ec:4c:93:ac:c1:74:ae:2a:3a:2b:7f:fd:30:dc:5a:c1:
33:62:75:e7:7b:e4:23:61:75:c8:bc:9b:01:54:fe:35:2f:e0:
9b:5a:75:9e:28:ee:f8:70:fc:32:03:d0:73:9e:fe:b2:a6:29:
eb:c4:05:e1:0c:ab:3d:43:da:25:c6:47:22:f9:fd:4c:68:65:
6d:7b:60:81:a1:ea:49:78:c1:2f:5c:57:cd:a4:bb:0f:32:c0:
e2:cc:5d:f2:f8:92:7b:35:4d:d2:eb:c4:a3:40:4a:8e:e1:c6:
28:fa:88:9a:1d:f3:07:dd:36:7b:6a:b1:12:59:87:3e:ca:d1:
88:c5:c8:b8:00:a4:9f:17:02:b5:82:b9:ea:60:dd:c7:59:b7:
c3:3d:3a:e5:48:1f:61:80:d7:09:28:36:73:1e:bd:66:21:d8:
f4:7b:10:12:6f:ab:b1:0c:5b:00:c9:ee:1c:1d:2e:2d:bc:b3:
62:f7:6c:00:82:39:be:55:bd:af:85:8e:f5:2f:26:28:e7:b1:
c5:c6:7d:63:37:54:fd:ed:8d:d9:88:56:62:ed:a9:ed:59:05:
d7:b8:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:22 2025 by rpki-client