Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8430c14-20ee-3823-8632-2ef32e019c4e.roa
File: d8430c14-20ee-3823-8632-2ef32e019c4e.roa (raw, json)
Hash identifier: wvwo0cpETZAfyjPMVZykD7656ZdJoPkCDJeWtQofS9Q=
Subject key identifier: 88:97:02:9A:7C:2B:BF:71:62:24:76:9D:0F:FE:A1:62:BA:3B:C5:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A3F2B62093A30D8E88DC1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8430c14-20ee-3823-8632-2ef32e019c4e.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:3f:2b:62:09:3a:30:d8:e8:8d:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=afe0b161-e250-4938-a7e4-ae359766514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:c6:15:51:79:90:a6:d7:67:e5:3d:ee:aa:
34:a5:eb:dd:43:27:09:12:50:5c:ff:ec:53:0b:3e:
38:c2:7f:7e:72:b6:dc:12:e7:38:a6:15:10:e9:03:
6f:b1:92:67:95:3a:4e:80:8c:eb:fb:e5:aa:d8:85:
1b:74:dd:f6:f7:bd:c2:9b:aa:ef:62:fd:4d:99:14:
d2:e8:be:de:85:82:1f:28:f1:a4:2a:2f:6d:5f:c3:
c4:5e:d5:14:64:cb:af:60:f5:36:3d:96:b0:0f:b2:
6b:44:33:70:d3:c2:2d:ca:27:a6:70:a3:43:c3:74:
a7:47:8c:45:3e:e8:e2:9a:1d:71:80:21:67:e3:72:
08:8d:d4:18:f8:90:ae:59:cf:9a:0d:8e:6b:e1:83:
fe:a2:3b:a5:ce:05:73:ba:72:4f:06:5e:40:88:86:
d9:57:1d:43:2c:0a:70:ea:4c:14:43:ce:b6:02:11:
4b:94:60:8f:5a:45:cc:d8:0f:fb:52:27:48:11:f3:
39:2a:bd:28:d4:e6:f9:20:26:70:09:2d:17:a8:a9:
b6:e6:28:b9:c8:cf:e2:32:98:e2:5f:36:18:e7:c3:
fe:d9:ba:4c:2e:9f:b4:0a:6f:22:cd:c2:0b:f1:60:
df:b5:47:93:8d:b1:9c:f8:af:a5:2f:19:ac:e6:bc:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:02:9A:7C:2B:BF:71:62:24:76:9D:0F:FE:A1:62:BA:3B:C5:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8430c14-20ee-3823-8632-2ef32e019c4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4d:a6:12:29:80:d8:36:fa:f8:8c:5a:69:60:bc:35:4e:7b:
3b:3f:be:dc:68:b2:44:49:b0:da:20:66:df:19:d4:6a:1c:c3:
2c:96:ad:84:e6:08:49:d6:af:6a:03:c6:5a:3e:93:82:55:a8:
83:4f:36:5a:92:24:cd:55:ee:40:3c:70:4c:3a:1e:33:09:b1:
3d:6b:18:c6:34:b5:a2:8b:b0:74:83:68:d4:6b:0f:1b:e5:63:
d9:7c:5f:a8:72:93:48:1d:c9:86:60:ba:c5:49:ac:ac:d6:2b:
64:3f:e6:79:c5:19:04:d0:19:e2:00:9e:2f:3a:dd:c6:59:a1:
33:ae:b2:ee:c0:51:86:77:bd:23:58:5a:e4:76:cc:d3:4a:6c:
2b:6d:4d:16:8e:bb:b1:69:09:3f:76:14:d8:1a:1b:19:f5:90:
aa:2e:d5:42:0d:e3:db:a8:5e:f9:56:37:9d:0b:e5:bd:db:b6:
e8:85:d4:eb:d0:c4:d2:a4:14:eb:bf:ca:d9:75:d0:1d:36:d3:
2d:5c:8e:fe:2b:f3:6f:cb:a9:73:09:d4:5f:f7:7f:89:25:a0:
4a:42:fe:69:a9:b6:b4:e6:4f:e3:12:74:88:11:19:4a:35:a2:
ae:77:17:b5:78:7e:b3:8f:61:b7:71:6d:fa:fe:66:62:b4:18:
14:84:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:19 2025 by rpki-client