Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8312938-2ded-3475-8c9a-c66410b1f6f6.roa
File: c8312938-2ded-3475-8c9a-c66410b1f6f6.roa (raw, json)
Hash identifier: aRuEAoEC59klgQAXaTsSVK6gvWzr0Cieo2x0eHCLPiU=
Subject key identifier: 8D:A5:68:CB:06:B3:8A:C4:AA:6C:EA:D9:A8:B6:D5:C3:57:59:9C:E3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E703ECF0C7A8BE366BE08EE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8312938-2ded-3475-8c9a-c66410b1f6f6.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:3e:cf:0c:7a:8b:e3:66:be:08:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=11376729-446c-45f4-8f48-e50a6a4f48d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:07:85:c6:51:11:ea:a2:1b:ea:41:f3:59:
54:26:e9:1b:7a:73:9c:28:3e:9f:7f:18:d8:1a:c6:
98:a4:7d:55:12:f5:e3:d6:2e:cd:bf:94:65:72:fb:
af:7d:9c:27:ee:9e:0a:92:95:ea:b7:25:ae:87:01:
27:35:c6:91:49:c9:43:60:24:9a:b3:52:00:41:a5:
db:8e:5b:c5:09:19:b2:8a:35:83:dd:dc:20:43:5b:
94:e7:e1:78:2e:e5:c7:61:d8:e5:0d:07:a4:55:05:
a6:78:0b:bf:77:09:c6:20:b8:77:7b:de:92:67:45:
0b:3b:71:5f:e1:49:3f:cd:71:d3:86:6e:c1:53:9e:
50:67:33:a2:d4:7c:4b:9f:9d:bc:8c:ab:fb:5f:44:
da:f4:e8:9e:3c:00:a4:b4:33:9e:fa:7b:14:8f:2b:
9d:4f:91:e8:69:fd:cd:5a:21:35:73:24:6a:f9:b8:
23:9f:03:00:29:93:cb:b2:79:3b:86:e2:e2:11:c6:
ae:94:45:5e:c1:78:72:7a:d0:ee:77:c9:f2:ae:b6:
d9:f5:77:73:6b:54:e7:f1:63:04:20:ef:2b:fb:43:
fa:24:be:bd:c6:61:6b:5f:c5:5a:40:c8:c7:6e:29:
78:62:91:c6:ca:dc:a3:1f:f9:fa:80:81:1c:eb:73:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:68:CB:06:B3:8A:C4:AA:6C:EA:D9:A8:B6:D5:C3:57:59:9C:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8312938-2ded-3475-8c9a-c66410b1f6f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:8f:96:27:e5:dd:48:55:fc:71:b4:20:54:51:e7:8b:27:dc:
c0:47:88:34:82:07:f6:37:1b:68:1a:7f:58:53:5e:98:57:3a:
25:d0:6a:fa:9e:50:e2:81:b2:f3:e9:9b:f6:56:7c:a5:21:d1:
f5:3a:61:2b:5d:f5:dd:49:94:ab:08:26:8b:e3:be:a5:3b:d8:
35:82:0d:68:5b:d2:b1:40:65:64:cf:b4:0f:8e:2d:98:e7:dd:
a3:72:09:7b:a6:5b:7c:76:47:1f:94:50:43:b4:b6:93:45:28:
b3:47:a2:e6:c0:f5:d0:36:9e:92:72:4c:67:39:8e:0a:d1:d1:
0f:83:10:d4:51:22:dd:c9:2b:8c:8c:30:f7:ea:33:41:1e:a9:
01:38:d2:62:e6:2b:c0:a8:15:ac:2c:19:d6:5f:36:ba:93:86:
ba:91:3b:3e:65:5b:89:cc:45:29:98:08:3b:b4:97:d2:2e:d3:
68:53:6e:23:ee:98:32:94:96:a7:98:57:74:a5:a8:94:20:2c:
19:48:c3:7c:8b:93:22:72:46:dc:a6:91:d3:24:cf:33:60:96:
6c:64:94:6a:26:7d:aa:bd:54:e8:81:c8:ba:ae:e1:40:b0:9a:
79:7d:43:20:d6:79:5c:e0:80:b2:94:6e:ba:46:7b:02:0c:36:
d2:57:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:34:51 2025 by rpki-client