Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb0735da-1f10-3af2-8184-25c2b582077e.roa
File: cb0735da-1f10-3af2-8184-25c2b582077e.roa (raw, json)
Hash identifier: V26Qw6S3WSW5JI7UBGM+fqj4TzNZ1z3cIzYDmTT07ZY=
Subject key identifier: 19:DF:84:16:ED:37:7E:28:D4:7A:BA:E9:85:B4:28:89:B3:B2:FF:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB969BEE68FB8E0317E9B63C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb0735da-1f10-3af2-8184-25c2b582077e.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:69:be:e6:8f:b8:e0:31:7e:9b:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=04b0682f-6f15-495f-a63a-d2f671a69156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:8c:4f:53:bb:34:4b:bd:59:d2:92:df:4b:
49:a5:81:b0:33:6a:c1:b6:7e:7a:e2:1c:ea:8f:22:
5d:30:32:fd:8b:f6:5f:93:ff:ec:25:f8:e9:6e:b6:
fa:13:bc:d6:3b:70:39:b7:d9:00:22:04:b0:26:87:
d0:77:82:97:38:dc:1a:f7:a4:fc:5a:00:76:66:96:
5e:4e:b9:ee:cb:4f:cf:5a:b7:70:5a:91:15:61:26:
ff:7c:e6:93:26:5a:90:8d:b4:c8:10:fd:61:c8:37:
a6:3f:70:d0:2a:9b:63:a5:b7:51:6d:e9:ae:34:3e:
db:5f:67:be:2e:5c:36:d5:37:80:61:a4:16:40:5e:
f4:a9:f1:c1:62:3b:9f:3d:47:6c:8b:06:37:c1:8c:
be:0a:ca:dd:98:f0:19:d3:a6:a1:d2:91:62:f9:da:
cc:68:ef:d4:b5:f9:b4:37:f5:36:10:cd:68:66:3f:
d9:41:4b:f4:55:32:90:fb:9d:88:48:d2:89:70:03:
1c:e6:85:8b:8b:54:cc:c7:a5:b6:df:d3:9b:8a:77:
73:db:bb:7c:b6:63:91:9b:fc:ae:23:9f:6f:66:63:
a8:3e:9a:17:85:d6:af:2b:00:b0:54:94:6b:d6:56:
78:29:46:db:dc:91:08:b9:18:2a:51:67:f3:b2:dd:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:84:16:ED:37:7E:28:D4:7A:BA:E9:85:B4:28:89:B3:B2:FF:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb0735da-1f10-3af2-8184-25c2b582077e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:9c:8a:62:85:af:4d:8e:74:54:e8:a6:a2:20:dd:3f:11:7e:
0f:7a:ad:3c:82:e0:11:ea:4d:c4:57:52:13:7b:34:79:c1:e4:
fd:be:5f:58:12:ba:b9:98:49:a8:bc:33:50:fd:4d:64:bd:b0:
48:25:01:88:71:16:9c:a5:b2:22:3e:40:11:81:3e:fa:77:4e:
b6:ed:9a:27:9e:77:78:0e:f1:25:65:04:55:8a:51:05:e7:1a:
ec:43:1d:94:75:fa:ff:94:b0:16:fe:f5:9a:06:2a:21:ec:e5:
e1:7a:97:25:0a:68:2a:5f:cf:bd:ba:0e:96:6a:81:bb:ea:46:
bd:b0:02:90:fd:8d:38:07:41:1b:fe:97:d6:df:19:10:46:0a:
09:9b:ef:0d:37:a5:5b:35:41:b1:f9:8b:04:ed:4a:33:38:4f:
d4:b8:32:68:a3:87:81:10:41:58:7b:64:1b:7a:00:12:d8:a0:
f1:b2:5a:7c:d4:ef:d4:06:97:de:4d:2f:2e:4f:d2:dd:4b:75:
73:b0:92:25:00:5f:37:85:24:2d:ad:65:4e:b8:da:50:7a:7c:
da:99:5f:7d:2d:c0:45:c6:dd:2e:f4:34:9f:65:86:a4:9f:41:
2c:66:22:cc:78:11:9d:68:4e:55:2c:94:da:e2:66:d2:b7:b7:
01:3d:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:45 2025 by rpki-client