Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c8d066-dd1d-3f5a-988b-c1dca25f139d.roa
File: d4c8d066-dd1d-3f5a-988b-c1dca25f139d.roa (raw, json)
Hash identifier: g4vjm+KTOmprqvk5C9XBA6IMFAW/Sj2tkwZCcMBik7c=
Subject key identifier: C5:E4:2A:42:CF:C2:0E:D9:B9:DA:66:AF:AC:C3:2B:6F:FC:0F:F2:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9271FACF77A487C397E34700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c8d066-dd1d-3f5a-988b-c1dca25f139d.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.140.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:71:fa:cf:77:a4:87:c3:97:e3:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=985bf34a-832e-485f-995e-20db499b077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:65:05:e4:97:a3:02:80:c7:23:72:4b:2f:
0d:de:c3:4d:82:de:16:a7:ea:d3:78:02:55:73:d5:
d3:a6:48:67:0b:2e:0b:60:3e:98:f2:2d:9f:a3:52:
84:17:a5:23:25:d1:8a:98:8a:ab:9a:11:19:f6:b8:
9b:f3:b8:c6:02:96:4a:18:7e:0f:b3:d4:49:b9:6d:
27:d7:2f:51:59:bf:48:59:1e:7a:87:2c:b7:ae:a8:
ff:0d:28:5c:f5:31:82:8d:d9:70:84:9d:e6:16:5b:
e6:bb:a5:1c:b0:ec:f6:27:ae:d8:24:38:a2:84:a4:
b5:88:74:37:e1:bc:48:9a:08:67:29:c0:19:69:cf:
9f:d8:37:29:c3:c7:7b:e8:75:f7:8c:68:71:9e:74:
f5:b3:4b:74:6c:fb:32:3a:32:55:cc:66:e5:91:7e:
f4:d1:4f:de:20:bf:fa:f0:05:70:fb:47:0b:f1:4f:
cd:f5:13:a4:39:e0:ca:ef:71:c8:6a:b4:1f:18:46:
0f:d3:f0:18:e8:90:b0:ee:0f:be:3b:53:6e:74:5b:
0a:02:a3:ff:44:db:29:4e:bd:ec:c8:5b:6f:79:ff:
0d:87:55:b9:20:5e:04:9e:2b:0e:a1:bd:20:b7:bc:
49:90:08:97:f7:42:76:18:77:fc:f8:49:5a:10:ba:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:2A:42:CF:C2:0E:D9:B9:DA:66:AF:AC:C3:2B:6F:FC:0F:F2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c8d066-dd1d-3f5a-988b-c1dca25f139d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ae:b7:67:f8:96:71:14:d1:e8:e4:9c:c9:fc:78:df:7e:96:
e6:90:48:8b:ef:bd:29:f8:68:b2:15:e1:84:09:c4:9f:18:45:
60:ad:19:a4:9a:0e:24:36:d8:68:4b:7b:ee:ca:17:6b:17:c0:
60:f2:f0:56:57:5a:cb:e6:90:2a:1f:5a:7a:8f:28:5c:57:b5:
a7:53:14:38:82:37:cd:93:22:70:7f:4d:55:44:43:76:45:99:
bf:3c:3e:7e:b6:c8:4d:9f:03:a9:5f:b7:77:86:ab:48:40:7a:
3e:1e:2a:1d:e7:b1:fa:7b:ad:b0:bf:61:89:9d:d2:0a:2d:99:
59:2d:57:9f:75:04:71:8e:49:4f:fb:03:e4:14:3e:e4:59:27:
01:a0:29:2c:5d:fe:14:48:cb:d7:db:c1:00:da:2d:99:8c:ee:
6f:7a:de:ce:ec:1c:21:93:39:47:01:65:58:0e:e0:10:18:55:
d4:e4:4d:9f:a6:34:52:b9:16:19:d2:5f:34:84:05:3f:75:e0:
ab:1f:41:e1:39:81:cc:29:c6:15:5c:ed:6c:36:ac:54:b3:47:
7e:cf:61:e2:68:b5:b7:f3:fe:87:42:74:2a:58:6f:7e:54:b1:
b4:37:56:76:06:04:3a:b5:91:2d:e1:ba:6a:0d:57:fa:90:5e:
3c:63:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:15:07 2025 by rpki-client