Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf59a6a4-0054-3591-9b88-22974d15442e.roa
File: cf59a6a4-0054-3591-9b88-22974d15442e.roa (raw, json)
Hash identifier: Kw1UyGTvzFBz6iTLuWLhSEIj0dCeqEyiss+rhnq3YAc=
Subject key identifier: BA:4C:F7:C6:3A:04:38:83:CC:FD:FC:8B:DB:EC:83:8B:9B:21:18:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E444E0CA0793D417368B3F9C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf59a6a4-0054-3591-9b88-22974d15442e.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.146.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:4e:0c:a0:79:3d:41:73:68:b3:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=662826b9-d14c-4da1-8017-6d94df0d6f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:34:e3:e2:5a:96:0a:38:c3:9f:67:a9:f8:
fa:3b:99:78:a9:20:29:13:19:06:d1:be:64:cf:e3:
13:f9:ca:f1:c1:56:82:de:a3:64:84:99:30:cf:36:
5a:37:a8:49:fa:f4:5b:f4:20:ff:09:b7:c9:2f:f6:
45:12:6d:c1:c6:97:cd:60:54:2d:f9:09:eb:a3:7a:
72:32:c2:91:f3:3b:7a:43:35:d1:c1:62:2a:67:53:
76:34:ab:78:ae:a2:ea:79:41:66:00:b6:6e:4d:42:
e3:7b:8e:81:f6:5d:a8:f2:81:6f:df:d8:cb:46:2f:
c4:d7:11:e8:64:d2:9d:a0:a0:fe:42:c2:31:74:67:
21:b8:4c:18:88:ec:8d:2e:d1:f5:94:50:82:4d:97:
9b:c9:8f:f3:88:0e:51:e3:42:6d:e5:1b:21:60:5b:
8e:d3:bd:44:97:06:2a:97:6f:a8:eb:8d:ed:a9:d1:
49:67:38:9d:86:aa:c6:25:17:8a:f3:bd:d7:9e:d5:
2d:cb:c2:eb:1a:13:0f:cc:23:75:1f:c9:ba:c1:a1:
ff:f0:27:e6:bf:22:28:72:69:03:38:11:d5:fe:9f:
c0:0e:b6:ea:41:4a:8e:7e:fa:9c:f4:9b:f5:ff:04:
20:9c:bc:d3:46:d4:1e:f3:eb:4b:7b:0c:e8:0b:be:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:F7:C6:3A:04:38:83:CC:FD:FC:8B:DB:EC:83:8B:9B:21:18:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf59a6a4-0054-3591-9b88-22974d15442e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.146.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:06:d9:84:30:83:9b:b2:6c:43:af:21:d4:a1:14:09:9d:87:
bf:7a:d2:d9:f3:54:4a:80:77:46:67:fb:ee:03:22:a4:93:c4:
b4:07:9b:8c:23:7e:03:cd:63:38:95:6f:89:05:55:81:93:19:
5b:7a:fa:11:f5:9d:83:28:99:cd:36:3c:0f:a3:63:49:91:d7:
c3:67:aa:78:26:20:71:76:a5:47:4d:e8:cb:6e:6e:64:7b:3e:
18:7f:8e:32:ea:6a:5f:3f:e3:79:cd:2b:a1:d9:a1:04:1d:24:
88:cf:ce:4a:a5:ad:9f:f8:20:5e:63:b0:26:41:29:80:88:d3:
03:bc:b1:58:47:9a:14:b2:85:38:0b:f6:87:d8:e5:48:d6:44:
04:82:7f:40:40:58:3e:55:83:3c:56:66:80:a5:14:b6:66:b3:
43:70:52:58:b8:61:54:c5:54:48:57:19:e8:67:f9:e8:6a:69:
a6:7b:51:ba:4d:5a:3b:9f:7c:17:ec:e3:79:11:8f:df:6f:a7:
ef:a3:84:34:00:d9:bf:05:26:bb:81:3a:56:e2:ad:30:6e:b6:
5a:b2:8c:a2:87:e6:05:e6:b9:1f:66:0b:f0:41:e6:1f:c0:bd:
6b:db:5b:cc:76:2e:31:83:69:6a:69:49:4c:ea:9d:08:76:5f:
9e:af:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:44:29 2025 by rpki-client