Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd162c3-c7af-37f4-8d7f-af5e3a655e35.roa
File: cfd162c3-c7af-37f4-8d7f-af5e3a655e35.roa (raw, json)
Hash identifier: 1qrXJXMWKPWW0xc2SFz9cU6TbwQ/BTCH99HI0vZMYbQ=
Subject key identifier: BF:80:2E:AC:14:34:C1:5F:C0:20:2D:A4:C9:94:A4:92:71:B1:E5:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA7D29425021CABBB919A5080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd162c3-c7af-37f4-8d7f-af5e3a655e35.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a7:d2:94:25:02:1c:ab:bb:91:9a:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=84274500-c1d2-4d42-9b94-c25b2b0d8194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:f3:7c:2e:33:4b:02:8c:0b:ca:4d:ac:4f:
88:fb:d8:6b:50:64:c7:7c:6c:9f:b2:34:a0:3d:7c:
92:38:6c:66:c3:29:f7:06:e8:50:5a:66:e2:57:99:
50:63:01:bf:c3:59:78:57:6a:46:ec:b3:37:20:6c:
9d:df:65:56:ad:0e:32:a0:8d:f9:04:5b:dc:dd:30:
8f:d9:4a:28:a5:74:c0:75:c3:a0:e3:96:7a:b4:59:
e9:e1:84:42:e5:49:5b:77:5b:7e:7b:ea:aa:63:f4:
bc:bb:1e:86:8b:2b:9a:72:e5:89:f7:5a:86:0d:fa:
6a:c4:f1:d8:19:95:db:f9:b4:bc:d0:0d:a2:90:fe:
dd:68:87:68:2b:f1:b6:23:1b:06:2a:01:82:2d:8a:
41:a9:37:50:67:55:15:d1:34:e6:f1:a4:e7:06:43:
d1:f4:5c:9d:ed:27:33:98:c9:6b:24:ef:0f:f3:d2:
7f:2b:08:7e:23:b6:6b:7e:8d:76:20:9c:24:00:c0:
b6:36:6e:69:67:7e:96:c3:f4:99:eb:79:62:e5:13:
a8:28:d2:81:b4:61:64:43:a0:21:a2:69:e8:5c:09:
02:09:68:28:12:57:bf:2a:65:02:68:7a:23:ac:0c:
fe:3e:6b:f7:d4:8f:a6:55:de:f9:99:55:27:ff:81:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:2E:AC:14:34:C1:5F:C0:20:2D:A4:C9:94:A4:92:71:B1:E5:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd162c3-c7af-37f4-8d7f-af5e3a655e35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e8:4d:52:8a:f7:30:f4:34:8a:fd:ea:46:fb:c7:16:50:81:
10:44:76:32:77:ab:98:62:73:b0:f9:48:64:d5:38:56:f4:55:
99:77:3c:2c:fe:fa:c8:51:6d:e2:e5:85:2b:9b:58:b8:8b:ca:
3f:b3:2b:c5:26:40:3d:89:cd:64:ad:0e:7f:5e:47:42:4b:85:
df:bb:e5:04:c3:39:2a:12:dd:3b:b0:63:eb:8e:9b:2a:e8:dd:
24:f7:af:b9:bf:93:98:06:1a:00:88:1e:18:de:f3:28:22:49:
65:0f:87:6b:f3:ac:0d:c3:61:1f:a5:a1:5f:96:61:a0:f3:bf:
38:99:8c:11:a3:34:90:b9:88:55:4b:20:be:a6:dd:d9:05:c6:
68:48:2c:f7:83:93:1e:f3:42:32:13:d9:57:83:b8:f0:05:53:
f2:6c:25:c5:b3:69:ff:fa:a2:7f:89:86:55:62:cf:87:0b:4a:
32:25:7e:6f:3f:07:84:3e:80:f1:55:75:35:1a:b7:08:e3:ee:
34:2a:29:35:26:c5:54:dd:8e:14:f1:f9:00:c5:5f:eb:c3:9d:
9f:ff:70:ea:db:cb:7e:08:14:e1:85:8a:0b:54:1c:6d:5d:21:
bc:53:63:fd:13:43:13:a7:09:63:87:44:e6:2c:f8:d5:e8:78:
40:d2:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:54 2025 by rpki-client