Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf14d9ac-bc2a-3a8e-9c62-85b42d466f3d.roa
File: cf14d9ac-bc2a-3a8e-9c62-85b42d466f3d.roa (raw, json)
Hash identifier: WA5xUBZKrZolWTiKwhIWNiI206fPErdKvMIzFhqVZLg=
Subject key identifier: 6B:61:DA:3A:57:0C:02:4A:F1:66:E6:87:FB:D8:D1:F7:DC:51:65:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF5E568209EB1290E9EE50F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf14d9ac-bc2a-3a8e-9c62-85b42d466f3d.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:e5:68:20:9e:b1:29:0e:9e:e5:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=5bb8eca0-97cb-4cb3-8ccf-7a59e4f9f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:bb:d9:ec:d1:d8:19:97:70:14:06:84:d9:
c4:0c:ce:78:fc:e4:b5:f9:5b:dc:d9:21:06:67:fc:
33:5f:48:36:8c:86:a4:db:02:71:7b:14:6e:b8:06:
a3:7f:92:f7:32:43:f7:a4:41:4f:1b:81:b1:a3:d8:
39:4c:de:aa:3c:36:7d:7c:45:cf:13:43:61:72:bc:
e7:d3:ae:e5:10:b2:4d:c2:d9:05:86:48:91:cd:fe:
76:eb:3c:1f:6d:02:ef:88:40:5a:0b:f1:29:d1:15:
26:3e:69:a3:d8:2f:c1:06:39:f8:6a:dc:7e:34:69:
40:6c:6a:83:d8:7a:45:30:ed:e7:48:9d:83:23:b1:
fe:9f:37:f0:a9:cb:a4:07:a3:2c:a4:fd:0e:84:59:
0f:ad:87:28:d4:47:df:68:a1:94:11:ba:43:d4:8f:
74:0a:6a:dd:55:4e:a5:ff:40:06:6d:48:be:ed:7e:
4c:44:d1:55:9b:d0:4c:be:86:d7:a4:88:9b:ed:16:
74:31:d7:d4:20:13:ff:88:c7:c8:82:41:ca:2e:d3:
7f:c6:c9:1e:45:4c:82:95:bd:12:06:e5:cd:af:5a:
f3:d7:32:70:5f:f7:d7:09:88:97:69:d8:78:1b:f7:
fd:f9:36:99:e1:56:48:b2:ad:1d:06:7e:7e:61:13:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:DA:3A:57:0C:02:4A:F1:66:E6:87:FB:D8:D1:F7:DC:51:65:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf14d9ac-bc2a-3a8e-9c62-85b42d466f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:16:2e:7c:bd:8e:82:ac:cf:a4:7b:5c:b5:15:7b:2a:0f:ff:
8c:a7:4b:5c:84:1b:9b:bc:31:25:9f:98:96:d1:7a:6d:79:90:
66:dc:52:42:31:b4:dd:b3:19:05:40:89:23:9a:5c:51:24:8c:
e7:31:74:23:2f:f0:5a:e8:5d:e2:fc:de:dd:ca:62:97:d5:57:
28:19:e8:05:1c:7c:9f:18:ef:35:14:36:d1:42:b3:a7:87:eb:
8d:d7:23:f1:93:2b:30:9c:d7:e8:a3:a4:73:ed:b1:59:db:d6:
2e:7a:91:eb:ae:88:1c:c8:9a:09:8b:0a:f4:41:55:c4:0d:77:
1c:04:93:16:8c:ea:e3:11:1d:43:bd:3f:10:6c:1c:3c:67:67:
eb:80:58:f4:c7:3f:eb:74:46:86:b9:ad:60:37:00:42:a7:c2:
51:b6:de:93:51:3d:74:d9:cf:35:65:dd:74:49:5f:7f:db:f1:
a3:42:14:fb:88:da:f7:84:2b:c5:6f:4e:b5:2b:92:94:ef:00:
5a:5a:fc:61:58:ba:27:58:a3:22:3b:db:01:4a:10:a8:16:03:
1e:74:9a:2e:e5:2c:73:09:e1:eb:af:74:5e:a7:33:77:de:c4:
0c:d7:be:90:11:30:0d:8b:6f:e4:03:54:cd:c6:9b:dd:a7:a3:
69:ce:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:26 2025 by rpki-client