Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1b6362-d25f-36e0-8853-b1675e84b5e5.roa
File: cf1b6362-d25f-36e0-8853-b1675e84b5e5.roa (raw, json)
Hash identifier: FaPmYIQc6hmxEvPwwcMNvMezAGZDUcpmNgjSu8LRQ3U=
Subject key identifier: E3:4A:D3:5A:3A:9B:A6:39:DC:82:13:EA:1B:60:56:E8:85:08:8E:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCE991C9DB64929C1C3983C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1b6362-d25f-36e0-8853-b1675e84b5e5.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e9:91:c9:db:64:92:9c:1c:39:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=463e2155-e65d-4df9-9580-e5cf6bd7626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:3d:89:0e:f8:a2:eb:3e:51:01:fc:be:0a:
b0:3d:0b:94:ad:0c:b5:a1:a0:07:8c:05:70:3b:5b:
f7:07:7c:fe:d5:c8:36:90:35:91:14:64:66:ad:25:
55:09:5f:bb:d9:2e:44:6a:c8:2e:84:71:de:de:2f:
89:27:8e:49:ec:59:bd:3f:02:c6:4b:72:3f:17:92:
c0:d9:a0:df:c2:f0:b0:26:04:40:ed:fd:51:17:92:
bd:60:b0:e4:98:2a:dd:00:52:ce:cb:78:e0:6d:63:
b9:fe:ad:6d:df:39:5e:fe:c5:56:99:c3:a5:3b:2a:
61:15:4f:d3:ef:63:cc:54:05:bd:42:b3:7b:c1:33:
e8:84:e7:26:41:08:a9:88:82:ec:da:51:4f:2e:e9:
7d:4c:8c:4e:82:f4:85:3a:4a:67:52:0a:bb:e1:74:
b1:2f:aa:5d:26:01:94:c9:9e:84:ca:4c:86:2a:8e:
76:e5:71:ca:19:ea:eb:57:cb:ff:4b:84:99:78:41:
6e:64:4d:8a:37:cb:1f:39:5e:55:d0:bf:a5:36:ae:
48:42:54:e4:e8:6e:1e:a3:d1:67:f4:66:8e:44:c1:
15:22:22:87:40:35:c6:ea:11:aa:0d:e0:24:a9:51:
c7:d2:0f:f9:59:9c:31:69:a2:3e:79:9e:c7:e3:04:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:D3:5A:3A:9B:A6:39:DC:82:13:EA:1B:60:56:E8:85:08:8E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1b6362-d25f-36e0-8853-b1675e84b5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:60:2e:42:cb:e6:5b:74:c3:97:2b:4d:54:59:aa:64:c9:43:
9d:8d:f8:1c:49:28:80:7e:0b:3c:5a:56:7d:75:48:51:50:11:
64:8c:d4:ac:5a:c3:3d:56:64:cc:1b:ba:08:ad:16:8d:8e:a4:
80:08:a6:c5:db:2d:b6:61:55:5c:7c:94:2f:eb:4b:ad:6b:15:
75:2c:1b:7b:a5:a5:62:d5:79:39:7e:bf:ce:f5:c6:12:60:42:
86:2c:07:53:ed:e5:27:4f:37:11:2c:6b:58:7b:d1:db:7b:a2:
fd:5a:c1:21:1c:0f:a1:c1:e4:f4:b6:35:12:f4:5f:23:d8:5f:
bb:f7:53:bd:6a:f2:34:ad:2f:cf:84:04:d5:e8:d3:4e:25:ca:
55:6a:f8:42:d7:2c:c2:54:25:e0:bb:82:5e:f8:5c:f0:53:c8:
4b:05:fb:05:25:95:a7:70:f1:eb:02:c6:59:a8:ac:54:37:93:
d7:50:c0:c8:58:17:9f:a5:88:93:c9:f0:78:03:e6:00:5a:b6:
f8:15:c3:d4:5b:b6:37:d0:88:b8:59:47:31:5f:a0:e0:85:f6:
23:7f:24:34:03:73:23:55:c8:df:75:4a:83:59:9f:b7:5e:16:
04:93:e6:c6:fa:4b:3f:68:1f:34:81:e7:ce:2b:f4:e6:09:3b:
3a:90:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:14 2025 by rpki-client